If access is denied to a legitimate request, it can negatively impact operations and reduce usability. This can be avoided by always granting a request unless its source is explicitly denied access. If such an access control scheme is followed, it will violate the following design principle for secure systems.

Defense$-$in$-$depth

Failsafe defualt.

User acceptability.

Economy of mechanism.