WidinX Academy · Season 2 · Episode 7 · 2:14
How access is decided
Identity, business context, action and scope, applicable rule: four inputs, one server-side decision, never a silent allow.
Presented by WidinX
Read what is said
- 01
A valid login is not enough.
Signing in proves who you are. It does not prove you may read this field of this product today. For controlled information, each request is checked against the context. Identity is one input among four.
EN 18239:2026 · access rights management (CEN) - 02
Identity: who is asking?
A person, a company system or an authority. The platform must know which, and how strongly that identity was verified. A short link for one task is a weaker identity than a signed business account. Both can be enough for their task.
EN 18239:2026 · access rights management (CEN)
The episodes explain the rules as published; they are not legal advice. Check the source for your own case.