Guidelines for Implementing Record Level Security

The following guidelines are some general rules for implementing record level security:

1. Record level security and the business logic of the application must work together.
2. For forms, reports, and dataports that are run by properties and not code, the security filters that you apply at user level are sufficient.
3. For forms, reports, and dataports that run code, assign an extra indirect read permission at user level.
4. For codeunits, assign the extra indirect read permissions at user level and at object level.
5. Permissions are cumulative and not mutually exclusive.