users cannot access the concurrent programs ( just like Forms) until unless the program is attached to a responsibility through a ?Request Group?. Thus the responsibilities provide the complete security by restricting access to forms, reports, tables( through data-groups) and also to specific records ( through profile options like Set of Books Id, MO Org Id).