12 13 Authorization controls are implemented by creating an access control matrix, which specifics what part of the IT System a user can access and what actions they are permitted to perform. When an employee tries to access a particular resource, the IT System performs a compatibility test that matches the user's authentication credentials against the matrix to determine if the action should be allowed. The following is an access control matrix for files and programs at Bahrain Company. User Access Files Programs User ID User Faculties Staff Students Assets Registration Scholarship Grading Hiring Password Data Data Data Data 1111111 ABC 10 1 10 10 14 4 2222222 DEF 0 1 I 10 10 0 3333333 H I L 1 1 3 2 4444444JKL 3 10 3 I 3 0 10 3 5555555 MNO 0 14 4 10 2 4 1 5666666 PQR 1 T 1 7777777 STU 10 2 10 2 3. 4 10 8888888 VWX 14 4 4 14 10 10 10. 10 3 0 3 9999999 YZZ 10 Codes of type of access: Codes of type of access: 0-No access permitted. 1-Read and display only. 2-Read, display, and update. 3-Read, display, update, and add 4-Read, display, update, add, and delete. Based on the information above, answer the following questions: 1. Which users IDS can read and display all data files? Users IDs: .&. & 2. Which users IDS can read, display, update, add, and delete the grading? Users IDs: & 3. As for files, the user ID 8888888 what he/she can do? & 4. Which users IDS can update and add to the hiring program? Based on the information above, answer the following questions: 1. Which users IDS can read and display all data files? Users IDs: & & 2. Which users IDS can read, display, update, add, and delete the grading? Users IDs: .&. 3. As for files, the user ID 8888888 what he/she can do? & 4. Which users IDS can update and add to the hiring program? Users IDs: &. 5. Which user ID can read, display, update, and add for all program except grading? User ID: 6. Which files or programs CANNOT be deleted by ANY user