A User with a single role can open a task only if the following conditions are satisfied:

All pending records associated with the task should satisfy the data security filters.
If there are multiple filters on a single column for a single role, then user will have access to a union of all data that meet each filter.
If there are filters on multiple columns for a single role, then user will have access to intersection of all data that meet each filter.
If there are security filters configured over the children or grandchildren records, then one of the following conditions must be true:
Primary object has at least one record passing security restrictions in each child tab with enabled data security.
There is a pending record associated with the task, which belongs to child tab, with data security enabled and meets the data security settings according to the preceding condition.

For example, consider a data security model in which the user has the role, SalesManager- NY and has the following security filters configured:

Filter 1: State code is NY.
Filter 2: Phone type is Business and Home.
Filter 3: Person salutation code is MR.

Using the data security model mentioned above, consider a scenario where the database has a primary object record, Mr. Florian Amadeu, who has the Billing address in NY state and facsimile as phone type. User with no data security restrictions adds a new Business phone and creates

send for approval

task. User with Sales Manager- NY role will be able to open the Mr. Florian Amadeu record on the data view as it satisfies all three conditions above, PO itself satisfies Data Security (Filter3), and has at least one record in every child where Data Security is enabled – NY address (active record) and BUSINESS phone (pending record).

Using the same data security model mentioned above, consider a scenario where the database has a primary object record, Mr. Dominic Wilkins, who has the Billing Address in NY State and no phone type. User with no data security restrictions adds a new Business phone and creates

send for approval

task. User with Sales Manager- NY role will be unable to open the task as the user has no phone that does meet Filter2.