Field-level is just column privileges. Row-level, I think you can only achieve that with views, which is less than ideal.