If used with a single schedd then performance could suffer (see posts passim)For this i had to use sudo command to allow the web server to execute condor_submit as the intended user. The WWW page gahered the required username and used a cookie to store it...etc.
It's not easy to switch to be a different user when actually
submitting a job (though doable but nasty) so no easy per user job
division