> "Authorization" is more than just technical controls. You are applying too broad a definition to "authorization." In this context it refers specifically to t

> "Authorization" is more than just technical controls. You are applying too broad a definition to "authorization." In this context it refers specifically to the configured authorization behavior of the computer system. They gave him the equivalent of a key to a lock implemented in the computer system, and the law is meant to address the equivalent of someone who pick locks, not someone who misuses the access provided by keys they were given.