Time after time most basic things are forgotten. Like should this user be able to do this action or read this data. I don't expect magic, but at least cover th

Time after time most basic things are forgotten. Like should this user be able to do this action or read this data. I don't expect magic, but at least cover the absolute basics. Then I might be able to figure out something more interesting or rare. Or if I get report that something has CVE, just tell me if that is a problem for you or not.