How to restrict access for certain group of users from specific instances of a case ?
We have received a new security requirement for specific cases those may contain high security or sensitive data.
The requirement is to make those instances of our case type invisible to all the users except specific group of them.
By doing that, the regular users cannot see these cases on any search action on the portals.
We can implement this by modifying our search system or removing/hiding those instances from search results but that's rather a weak solution as very prone to hacking. One another developer can put another grind into cases, and show everything with a simple report definition.
My question is, If we have a chance to give a specific permissions for a specific instances of the case ?
Any other best practices information are more than welcome.
***Edited by Moderator: Pallavi to update platform capability tags***