Designing an entitlement (security) table structure that maps users or groups to the data rows they are permitted to see.