Always by granting/removing access to individual documents . This can be accomplished by either removing NTFS rights, or by implementing Section Access inside your documents.
When a user doesn't have permission to access a document, the AccessPoint will not show that document to the specific user.
