In order to restrict access to information by location, you must define the user as a staff member and link one or more locations to the staff member. Administrators can search for a staff member and modify staff information from the Staff page accessed from the Security section of the Setup.