Universal Containers uses a custom object called Candidates to track information about people who are being recruited for jobs within the company. When an employee refers a recruiting candidate, that employee should have access to the Candidate record; however, only HR users should be able to view, edit, and report on the Salary field.
What action should be recommended for controlling who can view the Salary field?