1. Are you using QV Publisher? In the "distribute" section of the task, you can specify the users who have access to the document. If you don't have Publisher, you can adjust QVW file security, specifying who can see it.
2. You can use OSUser() function. It returns string DOMAIN\USER for the current user. So, you can use a condition in the object properties, e.g.