To the best of my knowledge, there is not yet any built in way (as of version 2.4) to provide access-control at the collection level. Mongo's ACLs go to the Database only. DoTo do what you want you will have to move that users
collection to a different database.