How data access control is accomplished?

We can change the filter of a datagrid. 

Another example could be to modify a property of a WCF Service that retrieves data from the DB and sends it to the front-end. 

In this case, the property is dynamically used by the webservice to filter the data. 

This type of pattern provide a high-level of protection for sensitive data.