Captive Portal: How to filter the allowed ports by user loguin

[Barahona]

I'm trying to implement a captive portal with pfSense. I need to filter the allowed ports depending on user loguine.
So the user categorized as user "WEB_NORMAL" He may only use ports 80, 8080, 110, 25 and 443.
But a user "WEB_VIP" you can navigate using all ports without restriction.

Is there any way you could do, with pfSense?

thank you very much and excuse my bad English