I know we just did some pretty granular security for an SAP customer using row level security and a scripting tool for SAP, so that should be possible in Sage 100 as well. It would need to be applied in a number of places within the application (all lookups, reports, etc.), so I would think the security would need to be at the DB level to make invisible (and that would definitely require SQL). I think the problem is going to be that whatever you do will be hard coded in some way shape or form even if users are grouped via role or something of that nature. If the environment changes, the coding (scripts etc.) will need to be modified. So it could be form of partner security.