Record level security and ALLOWED query clause for information register

Hello! I’m trying to understand record level security. I have created Files catalog with CreatedBy attribute as reference to Users catalog. And ReadOwnFiles role.
In this role for Files catalog I checked all rights except Interactive delete. In Data access restrictions for Read right I have added a row where left Margins default and Access Restriction filled with this query:

WHERE CreatedBy = &CurrentUser

SEL ECT ALLOWED
   InformationRegisterFileVersions.File,
   InformationRegisterFileVersions.Version
FR OM
   InformationRegister.FileVersions AS InformationRegisterFileVersions

First when you apply restrictions for reading and do not apply restrictions for inserting, updating or deleting it will cause unexpected behaviour like when you add an item to the catalog and can not see it. In your case if you will try to add Files catalog item for another user you will add it, but the system will display a message: The user doesn't have appropriate rights to execute a database operation. So you should set restrictions for Read, Insert, Update and Delete rights.

Second: ALLOWED clause works for metadata objects with RLS, so you need to add restrictions for your information register. For examle like following:

WHERE File.CreatedBy = &CurrentUser

I understand, thank you!