Scenario XYZ App Co are a UK-based company. XYZ App Co are developing a mobile application that will be distributed on a global application marketplace. Based on location, stated food type preferences and the current date/time, the application will provide users with a list of food outlets which: i) serve one or more of the preferred food types , ii) are currently open and iii) deliver to the location of the user. Additionally, food outlets will be provided with periodic usage summaries that include details of user queries for which their outlet was returned. Selected data flows and processing activities are illustrated in the diagram below.

XYZ App Co are planning to use Role Based Access Control (RBAC) to control internal access (i.e. within XYZ App Co) to the data used by the application.

Q) Define a set of applicable roles that might be assigned to users within XYZ App Co and Identify the key data assets and define a set of permissions that restrict the actions that can be performed on these data assets

XYZ App Co Food Outlet 1. Food Outlet Registration Detaila A. Inatall I Email Address, Password, Company Name, Food I Types, Location, Delivery Radius, Opening Hours C. Install B. Add Food Outlet 2. User Regiatration Details Email Address, Password, Gender, Date of Birth E. Enter Login Details 3. Login Details Email Addrecs, Password D. Add User F Process Login Detaila 4. Login Outcome G. Specify Preferred Food Types 5. User Query Details Location, [Food Typel, Date Time 6. Food Outlet Details Company Name, Food Types, Location H. Match User Query To Food Outleta I. View Matching Food Outlets J. Prepare Usage 7. Usage Summary Detaila Location, [Food Type], Date/Time, Gender, Age)] K. Update Marketing