Restrict Record Access To Assigned Customer

Is it possible to restrict form files to specific customer users? E.g. customers can only view records and reporting data related to records that are either created by them or assigned to them.