1.4.5 TODO
Verify that attribute or feature-based access control is used whereby the code checks the user’s authorization for a feature/data item rather than just their role. Permissions should still be allocated using roles. (C7)
| Level 1 |
|
| Level 2 |
X |
| Level 3 |
X |