Thanks for your answer, Nilesh.
So, is this group of items you're mentioning like a sort of flag? like a field with a value "CONFIDENTIAL" and set only authorized users that can look into the record.
if that's so, I have to make a process to change the flag so the record flag can be dynamically changed.
is this the right way?