Here in Canada you can only ask if they were convicted for an offence in which they have not been granted a pardon for.

If the person says yes, the employer is not allowed to ask what the conviction was for but I am sure the security check will tell them that.