> ## Content Index
> Fetch the complete content index at: https://blog.jestor.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Permissions or Filters: How to Scope What People See
- URL: https://blog.jestor.com/permissions-or-filters-scoping/
- Published: 2026-09-17T22:33:21.000Z
- Updated: 2026-09-17T22:33:21.000Z
- Author: Bruno Bannach

Confusing **permissions or filters** is one of the more consequential mistakes in an internal build. A filter changes what is displayed; a permission changes what is reachable.

## Why the distinction matters

A filter is a convenience. Treating it as a control is how data gets exposed.

- A filtered view assumed to restrict access
- Users removing the filter and seeing everything
- Data reachable through another view of the same table
- Access reviews that inspect views rather than permissions

## Comparing the two

| Mechanism      | Controls                       | Can the user bypass it?     |
| -------------- | ------------------------------ | --------------------------- |
| **Filter**     | What is shown in this view     | Yes, by changing the filter |
| **Permission** | What the user can reach at all | No                          |

## How to apply each in Jestor

1. Use permissions in **Jestor** to control access by role, field, and action.
2. Scope records so a user sees only those where they are the responsible party.
3. Apply permissions to indicators and goals too, not just to records.
4. Use filters for convenience — narrowing a manager's view to a period or a person.
5. Review access through the users and roles areas, not by inspecting views.

## Why choose Jestor for access control?

**Jestor** applies permissions by role, field, and action, which is what allows one dashboard or form to serve several roles without building a separate version for each.

Because record-level scoping is a permission rather than a filter, a salesperson limited to their own deals cannot reach anyone else's by changing what is displayed.

## Frequently Asked Questions

### Can a filter be used as a security control?

No — a filter can be changed by the user. See [jestor.com](https://jestor.com/?ref=blog.jestor.com).

### Can indicators be permissioned?

Yes, including goals and targets.

### Where do I review access?

In the users and roles areas, filtered by type and status.

## Video Tutorial: Step by Step

Check out other practical tutorials on the Jestor YouTube channel.

## Get to know Jestor

With **Jestor**, you can automate workflows, connect teams, and build internal systems your way — all without code and powered by **AI**. Discover Jestor at [jestor.com](https://jestor.com/?ref=blog.jestor.com) and see how to take your company's operations to a new level of efficiency and control.