How to allow some user for channel spy and specific dial plan

hi ,
i installed custom context module ,
and want 5 extensions to allow then to every thing except using channel spy 555 and 888 .

another request , i want another 5 users to deny them to every thing and only allow them to specif numbers ,( i mean i want to allow them only to dial 100 , 101 & 102 .)

how to do that using context module ???