I see that I can control a user's Role for a RecordType but is there an Apple approved way that we can lock down users to a set of Records in a RecordType? GitHub is an example of giving a user full access to a specific Repository Record, view only access to other Repository Records and also no access to certain Repository Records.