Section 3.3.2 Top Level Access Control Sub Level 3.3 Business Logic Access Control General Ensure that coarse grained access control is always enforced.