limit users?

List, 
My first post, so be gentle :).

16 IBM Aix 5.2 servers. Users have accounts on more than one machine,
and their login name is the same on each machine. No NIS being used
(don't ask).
I need to limit some users (no matter where they come IN from) to only
be able to do certain things. Example:
I only want user1 (from any host) to be able to retrieve a file called
/tmp/file1. All other users should not be able to. I looked into the
class option in ftpaccess, but that seems to only work at the host
level, and I cannot get to the user level.

ftpaccess file

#class   all   real  *		                    <------------
Commented out for the time being.
class devuser real [email protected]       <--------    How
can I put usernames in a class?? This syntax will not work.

readme  README*    login
readme  README*    cwd=*

message /welcome.msg            login
message .message                cwd=*

compress        yes             all
tar             yes             all

log commands real
log transfers real inbound,outbound
log security real

shutdown /etc/shutmsg

noretrieve   /
<------------
allow-retrieve absolute  class=devuser /tmp/file1
<----------Is this the best way to do this?