You$$re developing a customer loyalty app for a small chain of retail stores. The app will need a backend database to maintain customer information. While designing the app, you$$re conducting a planning meeting with your client to determine the scope of the project and resolve questions she has about the project.

Client:

I$\text{'}$m trying to understand how all this will work. What keeps a customer from going into the app and adding loyalty points themselves?

You:

Each user, whether a customer or employee, is given access only to perform the tasks they need to perform. So while a manager can a customer's account to add or remove loyalty points, the customer can only read that information.