Record level permissions

Question

In a database I am designing I have implemented profile based object level security.

Each user can view, edit, insert, update database tables according to the profiles (roles) he is a member of.

Now there is a need to implement "External Users" who can view only the relevant records and edit some of them (but not the bulk of the database).

I am working on an "record ownership" model.

Are there any ideas on how to restrict the users belonging to an "External Users" profile to see and work with some records of each table, but not all.

Answer 1

You should probably create a VIEW which limits the records and then apply the proper rights on the view.