FCCS Security

Summary

Wondering if someone could help me understand how dimesion security affects form and report access .

Content

My client has security on the entity dimension. We set up security groups to assign groups of users and power users Read/Write access at certain entities.

My understanding is that entity access applies to all artifacts in the application including forms and reports.

Even if users/ power users are granted access to a report or form, I would not expect them to be able to view data outside their entity access. Is this correct? However if the form/report contains entities outside their entity security,  I'm not sure if they will be able to view part of the form / report that is within their entity security or will be prevented from viewing the form/report altogether