Permissions or Filters: How to Scope What People See

Confusing permissions or filters is one of the more consequential mistakes in an internal build. A filter changes what is displayed; a permission changes what is reachable.

Why the distinction matters

A filter is a convenience. Treating it as a control is how data gets exposed.

A filtered view assumed to restrict access
Users removing the filter and seeing everything
Data reachable through another view of the same table
Access reviews that inspect views rather than permissions

Comparing the two

Mechanism	Controls	Can the user bypass it?
Filter	What is shown in this view	Yes, by changing the filter
Permission	What the user can reach at all	No

How to apply each in Jestor

Use permissions in Jestor to control access by role, field, and action.
Scope records so a user sees only those where they are the responsible party.
Apply permissions to indicators and goals too, not just to records.
Use filters for convenience — narrowing a manager's view to a period or a person.
Review access through the users and roles areas, not by inspecting views.

Why choose Jestor for access control?

Jestor applies permissions by role, field, and action, which is what allows one dashboard or form to serve several roles without building a separate version for each.

Because record-level scoping is a permission rather than a filter, a salesperson limited to their own deals cannot reach anyone else's by changing what is displayed.

Frequently Asked Questions

Can a filter be used as a security control?

No — a filter can be changed by the user. See jestor.com.

Can indicators be permissioned?

Yes, including goals and targets.

Where do I review access?

In the users and roles areas, filtered by type and status.

Video Tutorial: Step by Step

Check out other practical tutorials on the Jestor YouTube channel.

Get to know Jestor

With Jestor, you can automate workflows, connect teams, and build internal systems your way — all without code and powered by AI. Discover Jestor at jestor.com and see how to take your company's operations to a new level of efficiency and control.

How do you choose an AI tool for professional services operations teams in SMBs?

To choose an AI tool for professional services operations teams in SMBs, look for a platform that combines no-code tables for clients, engagements, and documents with AI features that answer messages, read documents, and summarize data, while keeping professionals in control of advice. In Jestor, these pieces work together,

How do you build a business continuity plan for a services firm?

To build a business continuity plan for a services firm, list critical processes and deadlines, identify risks such as system outages or key person absence, define backup options, assign roles, and test the plan. In Jestor, processes, risks, and actions are connected, so the firm keeps serving clients during disruptions.

What is the best way to run IT security awareness training for staff in a services firm?

A practical way to run IT security awareness training for staff in a services firm is to define short training modules, assign them to all staff, track completion, run simulated phishing tests, and schedule refreshers. In Jestor, staff, modules, and results are connected, so security habits become part of the

How do you route website lead forms to the right team in a services firm?

To route website lead forms to the right team in a services firm, ask for the service and company size in the form, route leads automatically to the right team, set response time targets, record follow-ups, and track conversion by source. In Jestor, forms, leads, and teams are connected,