Currently I have the account functionality working correctly using the default web role authenticated users. When a user signs-in they only see cases that belong to their account via the account table. However, when I create new table permission on the same case table with the global permission and read-only. The users still only see their account records in the list.
Desired outcome is to show all records on the list, however if you open a record that matches your account you can perform CRUD. If you open a record that does not belong to your account read-only access.
I have one web role so far the default authenticated.