Currently I am writing an application where I have multiple users. They have data that should only be visible to them and not the other authenticated users in the system. I
You can get the current user info this way: $this->Auth->user(). You can use the user group id in your callback to limit the query. Also take a loot at WhoDidIt Behavior.