Well, setting anything up so that a user cannot view a page would require something in the admin. You need something to specify exactly what users are not allowed to view a page. A user field on each post would allow you to accomplish this without looping over a repeater with a large number of rows because a user field stores all of the user ID’s in a single field.
