We have a dashboard that has 2 pages - Supervisor and Employee. Note, supervisor ID and Employee ID is a drop-down in supervisor and Employee tab respectively.
Now, we want to implement security for these pages. Here is the requirement.
1) If a Global user logs in, he should be able to see both the tabs and also he should be allowed to pick any value from the supervisor ID dropdown of supervisor tab and Employee ID dropdown of employee tab
2) If a supervior logs in, he should be alble to see only his reports in supervisor tab (Supervisor ID must take the User session variable value and run) and on the employee page, he will be able to see employee working under him in the drop down
3) If a employee logs in, he should be able to see only Employee tab and the report has to run for his login ID by taking the USER session variable (similar to supervisor)