Please take a look at https://training.plone.org/5/mastering-plone/export_code.html#protect-fields-with-permissions.
It can also be done in a schema definition, e.g.:
from plone.autoform import directives
from plone.supermodel import model
email = schema.TextLine(
If that's done you have to grant your permissions to roles/groups and than grant your users those roles or better add the users to the different groups.