Allow login attempt when value is greater than 10

I know it's possible to add a where query to the attempt method by passing an array to it. But what about a login form where all users having a permission value greater than 10 are allowed to log in?

Iterating from 1 to 10 would be a very intensive operation so it would be better to overwrite the attempt method. But what and where is the best way to do it?

via Chebli Mohamed