Once you implement User-Level security, and take away all access to the
tables, you will most likely want to build two forms. One will have access
to all records and will only be available to your bos. The other will be
based on a query that only allows access to the current user's records.
This would be done by putting criteria in the query under the "userid"
column for the record. The criteria would be =CurrentUser()
Since the users won't have access to the tables (that would let them get
around your security) you will have to set this query to "run with owner's
permissions".