Secured data

The controller should have security access to all units of an in-scope transaction. Data for any unit outside of a controller's unit security is treated as missing.