As the security manager, she knew how important it was to gather information completely before jumping to conclusions. After all, there is no reason for someone in Staff Payroll to be given clearance to confidential student records. To make this distinction a little more realistic, however, understand that user access security limits even authorized users to those parts of the system that they are explicitly permitted to use (which, in turn, is based on their 'need-to-know'). User access security refers to the collective procedures by which authorized users access a computer system and unauthorized users are kept from doing so. A person with a 'need-to-know' has been designated by school officials as having a legitimate educational or professional interest
