Studying Arrow Aircraft's security requirements
Before you start working on pages, you should study the site's security requirements.
The Web application for Arrow Aircraft will consist of two modules. The first module will let owners request their aircraft, and the second will let Flight Ops manage the requests. In this article, you're the developer responsible for the owner module's security.
The client wants all the pages in the owner module to be password-protected. You ask the client whether some pages should have different authorization levels depending on the user's access privileges. For example, some pages might be viewed by users with visitor privileges while others might be viewed only by users with owner privileges. After some discussion, the client decides that the pages should only be viewed by the aircraft owners. In other words, no authorization levelsor special access privilegesare required. Only owners with valid passwords can view the pages.
|