Authorisation

Term Key terms bank

Jump to a topic

See every item in the sequence

Definition

Deciding what an authenticated user is allowed to access or do (roles and permissions).

Example: A student can view marks but only a teacher can edit them.

Found in: syllabus, sample exam and familiarisation guidelines, school notes.

Short version to memorise (key terms bank)

Deciding what you may do.

Where you'll use it in the test

Syllabus area: Y12 Secure Software Architecture.

Question types it can appear in

Multiple choice: Pick the option that matches the definition or example.
Matching or table: Match it to its description, example or category.
Fill in the blanks: Choose this term to complete a statement or table.
Short answer: Define, outline or explain it and tie it to the scenario.

Where it has appeared in the paper

Secure Software Architecture (Part A, B). Part letters follow each paper’s own layout.

How to use it

A model sentence

General advice, built from the definition and example above

“Deciding what an authenticated user is allowed to access or do (roles and permissions).” Then apply it: A student can view marks but only a teacher can edit them.

In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.

Command words used with it

From the linked past questions

Explain: Relate cause and effect; make the relationship between things evident; provide why and/or how. (Sample exam Q19 (4 marks): Authentication and authorisation)

Official worked answer

Sample exam Q19 (4 marks): Authentication and authorisation (4 marks): official criteria and sample answer

Criteria

4: Explains how authentication AND authorisation could be applied. 3: Explains how authentication OR authorisation could be applied, OR outlines how both could be applied. 2: Outlines some features of authentication and/or authorisation. 1: Some relevant information.

Sample answer

Authentication ensures that only staff and students with valid usernames and passwords, which should be encrypted in storage (eg using hashing), can access the app. Authorisation controls access to specific features of the app based on user roles or groups. Teachers may have permissions to upload, assign and track homework, while students can only download tasks and upload completed work. By organising users into specific roles or groups, the app restricts access to appropriate functionality, ensuring that each user can only perform actions relevant to their role or group.

Open the question page

Go deeper

Flashcard: Authorisation in Secure Software Architecture (Year 12) · study that set
Memorise: Fundamental software design security concepts (six words)
Key terms bank entry: Authorisation
Master answer: sample-q19 (4 marks, short answer (explain, max 75 words)) (Master model answers: Secure Software Architecture)
Notes: When developing programming code, explore fundamental software design security concepts,… (Secure Software Architecture (Year 12))
Notes: Fundamental software design security concepts (six words) (Secure Software Architecture (Year 12))
Full term page: every question, note and marking comment for Authorisation

Check yourself

Explain “Authorisation” in one sentence, give an example, and name a question type that could test it.

Reveal the answer