A security engineer receives the following findings from a recent security audit: • Data should be protected based on user permissions and roles • User action t...