Restricting access without using clients

Is there a way to limit access to certain milestones or task lists or tasks based on employee vs. manager level, instead of having to use the internal/external flag?
Thanks! I'm loving your software!
mamartin