Access Control ImpactThe basic “flow” of access controls for a resource go something like this:
A user (identification) logs in to a server with a password (authenticates) and then the user is validated against the database of allowable users (authorization) and if there is a match, is allowed to process information based on the permissions (privileges) granted to the user by the system administrator.