Using a forms personalization to keep users out of certain data instead of custom.pll

Hi-  We need to keep certain employees from seeing certain Sales Orders, Items, etc.  When it's an entire subject area that is off limits like BOMS, the responsibility they share doesn't have BOMs as an option.  But when it is a subject area where they can see some data, but not all the data, we need a solution.  For us, that is just Items and Sales Orders.  

I'm trying to think of ways to bastardize the order organizer so certain flagged orders are not returned for certain responsibilities.  I use forms personalizations all the time... and so far I know I can hide some fields, hide some values, tweak this tweak that... but I haven't seen a way to ensure the order organizer search doesn't return any order where :ORDER.ATTRIBUTE8='Y'