Wireless data network access architecture and methods enabling location-specific and/or user-specific provision of services or resources. In one embodiment, an end-user device makes a request for service within a wireless LAN (WLAN). A wireless access point (WAP) controller/policy server determines whether the user device meets criteria for a first user status or a second user status, and assigns the appropriate status to an identifier of the end-user device. When the user device is assigned the first user status, the user device is provided network access according to e.g., a first permissible bandwidth allocation. Otherwise, the user device is provided network access according to a second, different bandwidth allocation. The first and second user status may be assigned based on a location of the user device within e.g., a venue, a class of end-user device, end user application, an access pass associated with the user device, or yet other criteria.