The security policy
To provide suitable security to Web resources, while retaining an easy-to-use system, the business has established the following security goals:
- Travel agent staff have complete control over all bookings.
- Authenticated customers can make and change their own bookings, but cannot interfere with the travel data of other authenticated customers.
- Administration staff have complete access to all of the administration information.
- Travel Kingdom staff other than the Administration department can change their own resume information and view partial information of other members of staff.
Parent topic: Dynamic URL example: The Travel Kingdom