As we mentioned before, security can be assigned to objects(webForms), modes of a transaction(insert, update, delete), tabswithin ViewObject,links, actions or attributes within an object.

Each of these items can have a functionality different from each other, or you can group many objects into one functionality.

Also, each item can contain more that one functionality, and one example of this could be read in the following link: Item with more than one functionality