Controlling record access for a single user or employee