Access Control (6 points)

Identify each of the following access control mechanisms described:

A company creates groups based upon job responsibilities. For an employee to perform any action in the company financial system, the system first verifies the employee's membership in the group granted authorization to perform the requested action.

A company creates a table with the columns being all the actions that can be performed in the company's ordering system. There is a row in the table for each employee. For each cell the in the table, there is boolean flag to indicate if the employee can perform that function.

An account manager has the ability add and review scans of receipts submitted by employees. However for the account manager to be able to share those receipts with someone else in the company, the account manager must make a request to the system administrator to change the permissions on the image to allow the access.