Andrea. I can't quite understand what you mean by 'controlling access' - do you mean the rwx permissions, by which you set read, write and execute on scripts and files?
As far as seeing what a user is doing is concerned, you can see what people have been doing in the operating system environment (but not usually in applications) by using more on their .sh_history, found in their home directory.
Hope this helps.