Server Enforcement of Security

In earlier versions, authorization was performed primarily on the client. This
meant there could be discrepancies between how permissions were validated by
the Windows client, by the Enterprise Portal client, and by other client types.

The addition of the Table Permissions Framework (TPF) to some tables in
Microsoft Dynamics AX 4.0 and Microsoft Dynamics AX 2009 shifted some
authorization to the server. TPF was limited to denying users access to full
records, but could not restrict individual fields from being visible. In Microsoft
Dynamics AX 2012 TPF is extended so that it can also work on fields. This shifts
more of the security load to the server. This helps to increase the consistency of
security between client types.

Regards,
Hossein Karimi