Separate Signing In from Permission
First identify the user, then consult the permission for the requested resource and action.
About 18 minutes, plus any extended practice
Open lesson 1Protect a Shared Workspace
A pretend viewer needs a read-only report and receives an unexpected password request. State the correct permission, verification route and why two passwords are not different factor categories.
Before you begin
- Read a supplied role table and distinguish view from edit.
Choose by skill rather than age alone. Read with an adult when useful, revisit a lesson, or explore another grade.
Follow the lesson sequence
Choose a Minimum Necessary Permission
Give the least permission that still completes the stated purpose.
About 18 minutes, plus any extended practice
Open lesson 2Check an Unexpected Request through Another Route
Pause an unexpected request and verify using a known official route rather than its supplied link.
About 18 minutes, plus any extended practice
Open lesson 3Distinguish Authentication Factors
Classify the evidence by what is known, possessed or inherent; distinguish a combination of categories.
About 18 minutes, plus any extended practice
Open lesson 4Review and transfer
After the lessons, try 4 new review cases and a practical task. Each answer has an explanation and a link back to the related lesson.
Open the unit reviewGuest answers are temporary. Keep your own paper or document; this unit does not certify completion or record a school grade.
Topic references
- 2026 CSTA PK–12 Computer Science Standards: topic reference — Systems & Security; Ethics & Social Responsibility
These references informed the topic selection. They do not certify complete standards alignment.