Extending Microsoft Dynamics 365 for Operations Cookbook

How it works...

When the user in the policy's role opens a form, or when a drop-down is displayed, the system will create a query that combines the form's data source with the policy's query definition as an Exists or Not Exists join. The query cannot be changed by the user, and is enforced at kernel level.

Here's a word of caution: since the data policy is defined using a query, it could add significant server load, especially, when the query is not written efficiently. In order to use policies, there should be a clear business case, and it may be more appropriate to have a secondary list page instead. The policies should be based on business process rules, where access must be restricted for security purposes. See the link in See also