# Category 6: Security & Permissions

> **Usage:** Definition of access and restrictions
> **When to load:** ALWAYS (core, minimal)

---

## 6.1 Access

| # | Question | Answer Type |
|---|----------|-------------|
| Q6.1 | Who can VIEW data? | List of roles |
| Q6.2 | Who can CREATE entries? | List of roles |
| Q6.3 | Who can MODIFY? | List of roles |
| Q6.4 | Who can DELETE? | List of roles |

## 6.2 Restrictions

| # | Question | Answer Type |
|---|----------|-------------|
| Q6.5 | Geographic restrictions? | Countries/regions |
| Q6.6 | Time-based restrictions? (hours, periods) | Ranges |
| Q6.7 | Audit trail required? Which actions? | List |
| Q6.8 | Regulatory compliance? (GDPR, etc.) | List of standards |

---

## SmartStack Permission

**Format:** `business.{application}.{module}.{action}`

| Action | Permission |
|--------|------------|
| Read | `.read` |
| Create | `.create` |
| Update | `.update` |
| Delete | `.delete` |
| Export | `.export` |
| Import | `.import` |
| Admin | `.admin` |
