Basic Concepts

1. Extensible Data Security (XDS) – It is a framework that allows developers or     system administrator to provide Data Security in D365 Finance and Operations.
2. Policy Or Security Policy – Policy is your main technical AOT artifact or element which is used to achieve Extensible Data Security (XDS).
3. Constrained table – Table/tables in a given security policy from which data is filtered or secured, based on the associated policy query. For example, Filtering Records in purchase order form (PurchTable) based on the primary table – VendGroup
4. Primary table –  Primary Table is  For example, Filtering Records in purchase order form (PurchTable) based on the primary table – VendGroup.
5. Policy query –Query of Primary table which is used to filter records from constrained tables.

Requirement

In D365 Fins & Ops, customer has one customised table – UserSetup with fields – UserId & InventSiteId where customer is maintaining user-wise records along with Site code.

Filtering Site master (InventSiteId) lookup values on the basis of site code which is predefined in user setup of current user.

Steps

1. Create a query of usersetup table.
2. Create a new security policy as per screens below: