A grade management program might have several roles for users, such as administrator, department head, teacher, guidance counselor, student. For each role, list briefly the actions a person in that role should be able to perform; for example, a single student should be able to see but not modify his or her grades, or a department head should be able to see the grades for each student in any class. It may be useful to start with one role and then consider adding or deleting actions for the next role. Are the actions of any role a subset of any other? If so, which? Is the suggested set of roles complete; that is, are there other roles with other actions? If so, what?

(Computer Security II)