LC7 — the role-REMOVAL half of the guard. Removing a system-user role is permitted while the other roles still duplicate its Allows; refused when it carries the LAST Allow; and a role contributing no Allow can still be removed.
LC7 — the role-REMOVAL half of the guard. Removing a system-user role is permitted while the other roles still duplicate its Allows; refused when it carries the LAST Allow; and a role contributing no Allow can still be removed.