ch. Access Control, exercises -08