record type security problem

Thanks for that tip, Jack! While the separate model on Record Type might be a good option here, unfortunately I don’t think creating the separate model will prevent users from accessing Record Types that haven’t been assigned to them. See this post:
https://community.skuid.com/t/record-type-reference-field-filter-showing-values-that-u…

You might need to actually add a different instance of the Record Type field to the page for each profile viewing the page, then for each instance, add a lookup filter based on the Record Type Name. In a field editor, you can then conditionally render each field based on the running user’s profile. Hope that helps.