I do this so often that I never considered this to be something I would write up, but I had a question on it last week so I felt maybe I should at least explain the Q&D on how to make this work reliably with minimal hassle.
When you are doing certain applications it occasionally requires more elaborate security settings that lock down the data by row versus by list or site. This walks through one of the simplest ways to complete the task with minimal risk.