The user can access only records that the user owns, that are shared with them, or that are shared with a team they belong ...