Not everyone should see everything

Contracts hold physician compensation and negotiated payer rates. Those are among the most sensitive numbers an organization has.

Use the switcher at the top right to become Tom, the IT director. The register drops from 51 contracts to the handful his department owns, and every currency figure becomes "Restricted".

That is not the screen hiding things. Those values live in a separate table with its own access policy — the database refuses the read, so the numbers never reach the browser at all. Ask for a contract outside his department and he gets a "not found", because a "forbidden" page would confirm it exists.