@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix schema: <https://schema.org/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

<https://knobit.org/id/task/dsec-access-control/I1> a edu:Question ;
    rdfs:label "I1 (2 points)"@en ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    owl:sameAs <https://bitbucket.org/reffa/ontology/id/task/dsec-access-control/I1> ;
    schema:hasPart <https://knobit.org/id/register/data-security#SE-305>,
        <https://knobit.org/id/register/data-security#SE-306>,
        <https://knobit.org/id/register/data-security#SE-307>,
        <https://knobit.org/id/register/data-security#SE-308> ;
    schema:identifier "I1" ;
    schema:position 3 ;
    schema:text "0.5 each. (a) TELLER's row filter uses account.branch_code, which tellers can update: the filter must use the branch from the HR directory, or branch_code is made read-only for tellers. (b) DBA is privileged and not logged. (c) Break-glass BG-001 has no expiry and no reviewer. (d) REPORT_READ has no owner."@en .

edu:Question rdfs:label "Question"@en,
        "Küsimus"@et .

<https://knobit.org/id/register/data-security#SE-305> rdfs:label "dsec-access-control I1: teller row security on an updatable branch code"@en .

<https://knobit.org/id/register/data-security#SE-306> rdfs:label "dsec-access-control I1: the DBA role is not logged"@en .

<https://knobit.org/id/register/data-security#SE-307> rdfs:label "dsec-access-control I1: break-glass has no expiry"@en .

<https://knobit.org/id/register/data-security#SE-308> rdfs:label "dsec-access-control I1: a role has no owner"@en .