Access control is a fundamental security concept that dictates who or what can see specific data within a system . It's essentially about controlling privileges to ensure solely authorized users or processes can utilize certain actions . Think of it like a building's security policy : you wouldn't want all users to have access to the sensitive file