Week 11 Reflection: When Should Authority End?

Choose either a human account or service identity.

In 6–9 sentences, explain:

• what required function justifies its current privileges;
• how authentication differs from authorization for that identity;
• what authority a session may continue carrying;
• what event should remove or reduce privilege;
• how the system should make that change effective; and
• which positive and negative retests prove the new boundary.