a more elegant approach would be to create a resource plan and consumer groups so that users in X group can be limited to things like how much max execution time, undo quota , cpu usage etc