Authorization scenario
To use an online facility, we need proof that
- The user has received (and passed) training
- A reservation has been made for a time slot
- A payment may be required
Additional information is required about the user
- Is the work proprietary?
- Is the user a student, staff, or researcher?
- What site resources does the user need?
These have nothing to do with file access controls