Page History
...
There is one case however, where you may find it useful to check Restricted Access. Suppose you have already set up a Framework, all your users, and their authorizations. Now you wish to add a new object (application or business object or command ref) to the Framework. For this new object you do not want users who are authorized to its parent to automatically get authority to the new object. In this case you would check the new object's Restricted Access property.
This property is in the Commands Allowed tab and the Identification tab.