Fred Can't See Others' Payroll Information

In the example, Fred can only see information about his own paycheck when he's browsing the payroll department's web server, but Barney can see everyone's paycheck information. As you see in the entry for Fred in the authentication server's configuration, Fred is in the sales department at the company, and Barney is in the payroll department. Because Fred is in sales and gets paid on commission, he has a legitimate need to look at a report that shows what his own paycheck will look like next week. Because Barney works in payroll, he needs to be able to fix problems with anyone's paycheck, so he needs full access.

In this case, the web server can check with the AAA server to find out the department in which each user resides. The web server can then decide which web pages each user is authorized to access.