It really depends on how many users we’re talking about. if they are not a lot, you could consider adding firewall rules for each of them. you could set the src-mac-address for each rule.
If you’re dealing with a lot of users, see if this approach helps: http://forum.mikrotik.com/t/authenticating-clients-through-mac-address/49287/1