← IGCSE Computer Science Paper 1

Access levels

Settings that give each user different rights to data: no access, read only, read/write or full control. Users only see and change what their role needs, protecting confidentiality and integrity.

Understanding Access levels in IGCSE Computer Science Paper 1

What it does: Giving a student no access to the payroll folder keeps private data hidden from people who do not need it. Administrators can change settings and set access levels for others, while ordinary users get only the rights their role needs. Read only lets the student view the file but not edit it. This protects the integrity of the timetable. A user may have read/write on one folder, read only on another and no access to a third. Too much access risks data being leaked, changed or deleted by mistake or by malware running on that account. Giving everyone the same high access means anyone can see, change or delete anything, so confidentiality and integrity are not protected.

Common mistakes: The branch prints "View only", so it must test for the read-only level. It should be ELSE IF level = "read" THEN. "full" is the administrator level, which can do much more than view. The access level is a text value, so it needs quote marks. It should be staffLevel ← "none". Without quotes, none looks like a variable name.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

This module's key terms are also in a printable crossword (Modules 553–577) and word search (Modules 553–607).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
A student needs to look at the school timetable but must not change it. Which access level fits best?
Read onlyRead/write
Matches
Marks file -> Student: Read/Write
↓
Students can edit their own marks, which harms integrity. They should only have read only access, or no access.
Applying
Meanings
Term
access levels
Meaning
Settings that give each user different rights to data: no access, read only, read/write or full control. Users only see and change what their role needs, protecting confidentiality and integrity.
Practice
Folder: Exam_Papers
Testing
Gaps
SET Marks.xls FOR Student TO
Check Answer
Spots
3 OUTPUT "Access denied"
4ELSE IF level = "full" THEN

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Rhinoceros' badge — Thick-Skinned Coder, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Quick Questions

1. A student needs to look at the school timetable but must not change it. Which access level fits best?
A. Read only ✓
B. Read/write
Read only lets the student view the file but not edit it. This protects the integrity of the timetable.
2. A student's files must stay private from other students. What access level should other students have on them?
A. Read only
B. No access ✓
No access means other users cannot even open the files. This protects confidentiality. Read only would still let them see the data.
3. Which statement about access levels is correct?
A. They give different users different rights to the same data ✓
B. They give every user the same rights to all data
Access levels are set by role, so each user only gets the rights they need.
4. A teacher needs to open a mark sheet and update the marks. Which access level is needed?
A. Read/write ✓
B. Read only
Read/write allows the user to view and change the data. Read only would stop the teacher editing marks.
5. Who normally has full control, such as creating accounts and changing other users' access levels?
A. An ordinary user
B. An administrator ✓
Administrators have the highest access level. Ordinary users have limited rights suited to their role.

Match the Pairs

Student: Read only → The user can open and view the file but cannot change, delete or save edits to it.
Teacher: Read/Write → The user can open the file and also edit, add or delete its contents.
No access stops a user from even seeing a folder, which protects confidentiality. → Payroll folder -> Student: No access
An administrator has full control, while an ordinary user has fewer rights. → Admin: Full control, User: Read only
Marks file -> Student: Read/Write → Students can edit their own marks, which harms integrity. They should only have read only access, or no access.
Everyone: Full control on every file → Giving all users full control ignores the idea of access levels. Rights should be set per file or folder to match each role.

Key Term

access levels
Settings that give each user different rights to data: no access, read only, read/write or full control. Users only see and change what their role needs, protecting confidentiality and integrity.

Fill in the Blanks

1. SET Marks.xls FOR Student TO READONLY
Hint: Type the access level that lets a student view the file but not change it.
2. SET Marks.xls FOR Teacher TO READWRITE
Hint: Type the access level that lets a user both view and edit the file.
3. SET Payroll FOR Visitor TO NOACCESS
Hint: Type the access level that blocks the user from the file completely, protecting confidentiality.
4. SET Settings FOR Admin TO FULLCONTROL
Hint: Type the role that has full control, unlike an ordinary user.
5. IF level = READONLY THEN OUTPUT "Cannot edit file" ENDIF
Hint: Type the access level that stops edits, which protects the integrity of the data.

Spot the Error

Question 1
A level ← "read"
B IF level = "none" THEN
C OUTPUT "Access denied"
D ELSE IF level = "full" THEN
E OUTPUT "View only"
Line D — The branch prints "View only", so it must test for the read-only level. It should be ELSE IF level = "read" THEN. "full" is the administrator level, which can do much more than view.
Question 2
A staffLevel ← none
B IF staffLevel = "none" THEN
C OUTPUT "Access denied"
D ENDIF
Line A — The access level is a text value, so it needs quote marks. It should be staffLevel ← "none". Without quotes, none looks like a variable name.
Question 3
A file ← "Marks.xlsx"
B pupilLevel ← "full"
C IF pupilLevel = "read" THEN
D OUTPUT "Cannot edit marks"
Line B — A pupil should only have read-only access to the marks file. Full control would let them change their marks, which breaks integrity. It should be pupilLevel ← "read".
Question 4
A IF role = "admin"
B level ← "full"
C ELSE
D level ← "read"
E ENDIF
Line A — An IF statement must end with THEN. The line should be IF role = "admin" THEN. Administrators get full control and ordinary users get read-only access.
Question 5
A folder ← "Reports"
B level ← "read/write
C IF level = "read/write" THEN
D OUTPUT "Can view and edit"
E ENDIF
Line B — The string is missing its closing quote mark. It should be level ← "read/write". Every text value must start and end with a quote.

Student with a class code? Join your class →