Put it into practice.
A service that reads public course material should not also have permission to delete private student recordings. Separate roles and narrow permissions reduce the impact of a compromise.
A common mistake
Authentication establishes identity; authorization determines permitted actions. Signing in does not by itself authorize access to another account’s records.
Original independent study explanation. Revised October 2026. Practice assumptions are illustrative.