Final answer:
Access controls are evaluated first at the Table-level (most specific to most general), then at the Field-level (most specific to most general).
Step-by-step explanation:
The correct order in which access controls are evaluated is 2) First at the Table-level (most specific to most general), then at the Field-level (most specific to most general).
- By evaluating access controls first at the Table-level, it allows for a broader level of control over multiple fields within a table.
- If access controls were evaluated first at the Field-level, it would limit the control to individual fields and may lack the ability to set specific restrictions for the entire table.
I switched between tables to provide a clear explanation of the correct order in which access controls are evaluated.