Universal Containers has two types of applicants, hourly and salary.

Update the org-wide default to private and create a sharing rule for the role of recruiting manager.

Create a permission set containing the salary record type and assign it to the appropriate users.

Remove "create" permission for the salary applicant objectfor everyone except the manager and VP.

Configure the hourly record type as the default and instruct non-management users to accept the default record type.