IDD, however, provides a simple data security mechanism. For each subject area,

security filters

can be defined in the IDD configuration file. A security filter specifies a filter condition that IDD applies to any data accessed by users assigned to a specific role. For example, a security filter can specify

COUNTRY_CODE = 'US'

, which can apply to users with the US Data Steward role. Each filter can apply to multiple roles. Any number of filters can be created for a subject area for any number of roles.