Slide 39 of 57
Notes:
If there is a default negative authorisation and security administrator has forgotten to specify the required authorisation