The believe the usual way is to have a separate authentication service, to which you send the user's credentials and you get a token that you can use to request only that user's data.

That means, barring other exploits, you can only access the info from the users who logged in while you had control of the machine.