Design an internal permission and access control system for a security-engineering context. The discussion must cover: (1) the tradeoffs between Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) — when to use each and how to combine them; (2) applying the principle of least privilege; (3) how permission…