The easiest way if your app requires user sign-in (Security > Require Sign-In > Require user signin? = ON) and you know who is who (from each user’s email), then use something like the following expression in table’s “Are updates allowed?” entry.
The issue in your expression is how you’re using the AND function. That function returns a true/false value–not a list of values. Regardless, in this case, you need to return only a single value.
See, for example, the following sample expression from the USERROLE help article:
You can reference the list of valid permission enum values when you open the expression editor for a table’s Are updates allowed? property:
An expression to dynamically change the update mode of the table on a per-user basis. The allowed values are “READ_ONLY”, “UPDATES_ONLY”, “ADDS_ONLY”, “ADDS_AND_UPDATES”, “DELETES_ONLY”, “UPDATES_AND_DELETES”, “ADDS_AND_DELETES”, and “ALL_CHANGES” (Enum)
