CS KAIROS · LEARNING LIBRARY
M06 · System Hacking · Safe practice
This module uses offline data, self-created inputs or tabletop scenarios. Follow the steps and check the evidence you produce.
Tabletop exercise: complete a permission matrix
Use the fictional roles without changing real accounts.
- List reader, maintainer and the three actions.
- Fill allow or deny using the example, then add “reader reads someone else’s report.”
- Write one positive check and one denial check.
Expected result
Reader writes and role changes are denied. Maintainer role changes are also denied. A reader cannot read someone else’s report.
Check your work
Why does hiding a Delete button not replace server-side authorization?
Finish and clean up
Save the matrix; no permission changes require restoration.