Authorization Protocols

• Role-Based Access: Align permissions with user roles (e.g., administrator vs. teacher).
• Least Privilege: Default new roles to minimal required permissions.
• Session Expiry: Prompt re-authentication after periods of inactivity.