Yes it is spelled with an 's' here because it is spelled with an 's' in all the documentation….
Record Based Authorisation
The core Authorisation system allows you to set up record based authorisations. To implment this you go to groups page, and under the collections tab, you can select "advanced" on the right side for each of the tables you want to only display certain records to certain users. Note this predicate requires a test that is done on a field, so we created a logical field. This is very cool, but does come with a performance price…..