you can virtual private database for that
VPD which will mask columns for you ;and within you can use
SYS_CONTEXT(userenv, string') which will derive all user variables for you then you can filetr them
this is a very good doc
http://homes.cerias.purdue.edu/~bhargav/cs526/VirtualPrivateDatabases.ppt