ocr: Always On Step 1: UserRoleLink Check whether the role SuperUser isi in Fred's ettective context. Jser Fred Role Fred Iti isnt, SO go to Step 2. Controlled Class Step 2: ConfigVersion Check whether allowed there or are explicitly any roles explicitly prohibited to carry out this action P. access rule allowed freeze on the class ConfigVersion. ProjectMember is explicitly allowed Role rojectMember toc carry out the action, Fred does not have rojectMember in his ettective context, and ObjectTeam prohibits the action.
