Row-level security
A rule that limits which records a person sees. The sales table is shared, but each rep sees rows for their own territory; each store manager sees their own store; each client sees their own orders in a portal. One dashboard, many views.
Column-level security
A rule that hides or masks which fields a person sees. Salaries, margins, charge-out rates, personal details — visible to finance or HR, hidden or masked for everyone else, on the same page.
The rule has to hold everywhere
The question to ask any tool: does the rule apply in the CSV download? In the scheduled PDF? In the embedded view in your portal? In the answer an AI assistant gives? If any of those bypass it, the rule is decoration.
- Dashboards and charts
- Downloads and exports
- Scheduled reports
- Shared links and embedded views
- AI answers
In Klayara, rules are attached to the data itself, so they apply identically in all five places, and an activity log records who changed and shared those rules. Security & permissions.