This is regarding the option to port forward through SSH
/ip ssh forwarding-enabled=yes

I know that I can probably firewall based on ip addresses and ports, but is there a way to firewall based on username?

For example, if bob (only bob) tries to portforward to port 85, it would be blocked?

Thank you.