The intern who deleted the list
On a first day, an intern opens the shared asset list and deletes a column. Everybody can edit it.
Nobody meant harm, but 400 rows are damaged. If the intern could only read the list, the fault could not happen. Permissions decide who may do what to data.
By the end of this lesson
Note
I can explain how permissions control who can see and change data.
Key words
| Word | What it means | Example |
|---|---|---|
| Permission | Approval to do something with data. | May read the list |
| Authorisation | Deciding what a signed-in person is allowed to do. | Staff may edit, students may not |
| Privilege | A special power given to an account. | Administrator |
| Access right | A single allowed action on an item. | Read, write or delete |
| Rule | A condition that decides if access is allowed. | Only from the school site |
| Least privilege | Giving only the access a job needs. | Read only for an intern |
The cells students fill in are left blank in this preview.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Four ideas about access
Authorisation decides what a person may do after they sign in. Signing in proves who you are. Authorisation says what you can do.
A privilege is a special power, such as an administrator who can add users. An access right is one allowed action on one item: read, write or delete.
A rule is a condition. For example, only from inside the school.
Worked example: the asset list
| Person | Privilege | Access rights on the asset list | Why |
|---|---|---|---|
| Intern | None | Read | Needs to look, but not to change |
| Technician | None | Read and write | Updates rooms and tags |
| IT manager | Administrator | Read, write and delete | Owns the list |
| Visiting auditor | None | Read, only on site hours | A rule limits when |
The cells students fill in are left blank in this preview.
Check: which idea?
Have a go
Check: which idea?
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.