Why does a successful login not let you do everything?
A system can recognize an account without allowing it to edit every record. Role-based access connects permissions to roles, with a user’s permitted actions depending on the relevant assignments and constraints. Identifying who is present and deciding what they may do are separate questions.
Questions you could explore
- What might two successfully logged-in users still be allowed to do differently?
Start reading
- NIST Computer Security Resource CenterRole Based Access Control: FAQs
NIST’s role-based access FAQ explains role assignment, authorization, sessions, and additional constraints.
Ready to try your ideas aloud?
Your topic carries over. Record up to 2½ minutes, depending on your plan.