Once the complete security implementation has been released, you will set a permission key on a business object's field and that permission key will be tested by the currently logged on user to determine whether the field can be accessed.
How to implement field security in StrataFrame?