Hiding Records Based on Access Level

I have a project that includes a section for storing documents. Documents are stored based on Category. Users can only see and download but Mangers with higher access levels can add both categories and documents. The challenge is that some categories are intended for view by everyone while others are more sensitive and should only be viewed by those with higher access.
Below is an idea of what this looks like and how some categories need to be visible to all while others only some.
Documents

|

|- Procedure Documents (Everyone can see)

| - Doc 1

| - Doc 2

|

|- Policy Documents (Everyone can see)

| - Doc 3

| - Doc 4

|

|- Administrative Docs (Only Managers can see)

| - Doc 5

| - Doc 6
I’ve experimented with the guidance “Hide controls on Add/Edit pages” but that doesn’t meet my needs.
I don’t want to create separate document depositories for the different categories.
Since categories can be added at any time, it wouldn’t be advisable to use a solution that requires rebuilding the project each time.
Would it be possible to add a field to the Category table that could be used to identify what access level is necessary to view the Category and then use a variation of the code mentioned above to check the access level before display?
Thank you in advance.