In our current setup we had a base setting for all our users due to having a small internal team, a simple security profile for their home territory was all that was needed to get them to view what they needed. Now we are adding some outside consultants and wish to restrict their searching capabilities. 

Within the user settings I can restrict them to only "My CRM" and lock them only to their own lists, however they still have access to the "Find" options to search on every person, company and opportunity within the CRM.  Adjusting the "view" settings within the security profile they are assigned to for Persons and Companies  removes the Find/search options however the leads and opportunities disappear from their "My CRM" despite being assigned to them.

Is there a better way to restrict Find?  Or do I need to start getting a bit more complicated by working in things like new territories.