real user limit file upload by file extension

What's the best way to limit just one real user ( say john ) to only be 
able to upload files who's name matches *.foo for example.

Thanks, Marc