Assigning object security to roles
If you are writing your own programs to access Optiva data through the Application Server layer, default object security does not apply. In this case, the object security, that you apply through the role, is your means of controlling access to the data.
But this security has an effect even in the normal course of operation, with the user interface in place.