Deep Dive into Salesforce Record Security
Salesforce employs a multi-tiered security model starting with Object-Level Security (Profiles & Permission Sets), Field-Level Security (FLS), and Record-Level Access.
Record access is controlled via Organization-Wide Defaults (OWD), Role Hierarchies, Sharing Rules (Criteria and Owner based), and Manual/Apex Sharing tables.