lesson
Give access needed for the task
1 · Learn
Least privilege means giving an account only the access its role requires. Separate ordinary use from administration and check permissions at the resource boundary. A broad administrator account used everywhere increases the impact of mistakes or compromise.
Removing a visible menu does not revoke server permission. Test both allowed and denied requests using dedicated test accounts, never another person's credentials.
2 · Worked example
A reporting account may need read access but no ability to delete records. Those permissions should be enforced, not merely described in a label.
3 · Your turn
Should a read-only reporting account be able to delete production rows?
Check your answer
No, unless its authorised role is deliberately changed; deletion is outside the stated task.
4 · Apply your learning
Build an access matrix for a fictional app and identify one excessive permission to remove in the design.
Adult guidance and safety
Use an approved sandbox, invented data and test accounts. Do not probe other systems or expose credentials. Retain test evidence and accessibility checks; these teaching models are not a completed practical project or a specified GCSE qualification.
Open your writing and drawing pad
Write, draw or show your working. Use a mouse, pen or finger. This pad is not a submitted answer.
Not saved to your account. Download your drawing as PNG and your typed notes as TXT before leaving or refreshing. They are separate files. Do not enter private information.
Open a picture saved on this device to draw on it again. Opening replaces the drawing, but Undo can restore it. PNG only, up to 4 MB and 4096 × 4096 pixels. The picture stays in this browser; it is not uploaded. Paper lines in a saved picture become part of that picture.
Clear the drawing? Your typed notes will stay. You can undo this action.
Your pad is empty.
Open a UTF-8 TXT file from this device, up to 40 KB and 10,000 characters. It stays in this browser. Opening can be undone until you type again. Downloads keep a new copy; they do not change the file you opened.
Replace the notes on this page with the opened file? Download the current notes first if you want to keep them.
Typed notes are not submitted answers.
Check a calculation · Year 5 onward
Use this only when your teacher or adult allows a calculator for the task. Show your thinking first. It does not replace mental or written arithmetic and does not mark your lesson answer.
Powers, roots and trigonometry · Year 7 onward
Use only when the task allows a calculator. Choose one operation at a time and record your working. Trigonometry here always uses degrees (DEG), not radians. Inverse sine, cosine and tangent return an angle, not a reciprocal. Keep exact fractions and π in answers when requested.
Approximate numerical results use up to 12 significant digits. Inverse sine returns −90° to 90°, inverse cosine 0° to 180°, and inverse tangent −90° to 90°; these are principal values, not every possible solution of a trigonometric equation.
Practice this lesson
Lesson resources
Browse the available practice activities and worksheets for this lesson.
Your progress