Lesson 3: Passwords, Authentication and Access Control
How can someone sign in successfully yet still be unable to open one file or change an important setting? Imagine a staff member entering the correct account details, reaching a company system, and then receiving “access denied” for a sensitive report. This apparent contradiction reveals the central question of secure access: how does a system know who is making a request and what that identity is allowed to access or do?
