(a) Why are authorizations needed after a person is authenticated?
(b) What is another name for authorizations?
(c) What is the principle of least permissions?
(d) Why is it a good way to assign initial permissions?
(e) What is bad about assigning all permissions and then taking away the permissions a user does not need?
(f) What does failing safely mean in a security system?