Next: Make access the user's
Up: Make it easy
Previous: Make the path of
- Ensure that the interface does what it says it does. If the
expected abilities of the interface and the actual abilities don't match
up, how can we expect users to make appropriate choices?
- The effects of any security-relevant action should be explained to
the user before the action is taken. The interface also needs to help
the user find actions that suit his or her goals.
- It should be easy for the user to tell what access has been
granted and to whom.