ok, have you ever come across a platform that implements role restrictions of 'database tables' (Customer, Sales Order, Case, etc.). Its quite weird, theres standard and adequate enough security implemented server and client side.