In short yes. You put users in a context and only allow certain features in that context. As far as the limit you probably wish to write an agi or app to handle the tracking of the mins used per day and disconnect the user in need be. It could be all done in extensions with dbput and dbget or sqlite too if you wish.