How can I deny a user from seeing a particular application. Something like the deny permission in windows. The user is part of a bigger group, and so the application, is part of a bigger bundle. I would like the user to access all application in the bundle apart from one. I am new to this, I hope I am making sense

Thanks in advance.