<<Control Measure>> Allow permissions only on a least privilege bases i.e. deny by default
(
)