Comment Re:If you can log in, you have permission (Score 1) 25
Of course, a successful login doesn't grant unlimited privileges. Systems can restrict access to specific files, databases, or functions. But there is a difference between being denied access by the system and being accused of misusing access the system actually granted.
The Supreme Court recognized this distinction in Van Buren v. United States (2021). It ruled that using authorized access for an improper purpose does not, by itself, violate the CFAA's “exceeds authorized access” provision.
The burden is to establish what access was prohibited and how the person crossed that boundary. It's not enough to assert that permission was absent despite the system accepting their credentials.