Restricting access only to authorized users and programs adds another security layer that prevents intrusion into a system. Authorization is the security practice of permitting access to systems and files through applied security policies and file access restrictions. This section reviews how user access to systems and files can be controlled.