Use Cases: Patterns and Blueprints

Chapter 44. Mistake: Security Levels with Actors

Fault

Capturing the security levels restricting who may use the different services of the system only by defining actors corresponding to the security levels.

Keywords: Access rights, business role.

Incorrect Model

Model

Detection

A use-case model lacking an explicit use case for checking access rights is a warning sign when the usage of the system is to be restricted. However, it is necessary to check the details in the use-case descriptions to be sure this modeling mistake has been made, because the check of the access rights might be hidden inside the use cases (see Chapter 27, “Access Control”).

Discussion ...