Setting application, action and row security

Hi all,

I'm setting up app, action and row security to a new module which is being implemented on a productive installation. I already designed the roles with the action and application security. In the oder hand, I need to setup row security by MCU. My question is: do you recommend to mix row security in the roles that meant to be for app+action security? Or do you recommend to keep the row security in separate roles, and then assign app+action roles and row roles to users?

Regards

Juan