Would there possibly be a way to limit which users can ask for X11 fowarding? That is Bob can can run Gedit (or any GUI app) but Sue can't.

While I'm at it... is there a way to do that with specific programs... I know I can change the permissions so neither Bob or Sue can compile with GCC, but Sue should be able to. How do I do this?