Part 2: Learning portal security by example: entity permissions in the Customer Self-Service starter portal