2)You are working at a business that sells products online and have been asked to check that customers have appropriate levels of access to the IT system. Customers view products online and make purchases. Each purchase is added to a 'shopping trolley' and then taken to the 'checkout' for payment.

Required25 marks

Provide a brief specific example of the sorts of actions a customer could take in each area of the system, if the person has access to that part of the system. If you think a customer should not have access to a given part of the system, you must state why.

The system allows varying levels of access, as set out below.

Z = zero - no access at all to that part of the system

RO = read only access to that part of the system

RM = read and modify records

RA = read, modify, create and delete records

Area of the systemLevel of access

(1 mark each)Example

(3 marks for the first area, then 2 marks for each successive area (2 - 7)

1. Customer details (credit card details and mailing address details) RA

2. Transaction history (previous purchases)RO

3. 'Checkout' (to make payments to the company)RA

4. Product catalogue (images, descriptions and prices)RO

5. Amounts owing to suppliers and supplier bank account details RO

6. 'Shopping trolley'RM

7. Purchases database (showing the costs to purchase each product from the supplier)Z

8. System log filesZ