Permission structure for the API

We would like to use the API to read various information from the boards and display it on our internal dashboards.

However, you can currently read all boards of the entire company via the API. It would be very good here if there was a way to use an authorization structure to control which information can be read by which user.