To solve this problem, i used to put reader and author fields in documents.
So if your user does not have the right to see or edit a document, it wont appear in the view.
Works flawlessly even if the user know the url for a document, he could not read it…
For that, do not forget to hide empty category in the view option.
The other way is to create a category on the username of your user and to restrict category to this username.
I've try it with notes2view without a great success.