The current Users-permissions plugin is very limited in the control you have over accessing fields or even nested relations, components, and dynamic zones.

Our intent is likely to replace the Users-Permissions plugin with an entirely new one, some information is available in the following issue: https://github.com/strapi/strapi/issues/2161