Blocking of sites on a group

[vivek.krishnan]

Hi,

pfSense newbie/user here. Have used the old pf, but that was quite sometime back.

Anyways, I am doing a free install for a friend, and want to know the following

How to block access to certain websites based on usernames, say from the captive portal? There are no VLANs though they have a dedicated managed switch [cant be bothered though ;) ]. I can give them dedicated IPs both manually and via DHCP.
Will allow access after hours

The main reason behind this is ensuring that bandwidth is not used during work time

Any suggestions?

I will need to give full access to only a few users, like the marketing chaps who might need to visit facebook/youtube