A user proves their identity with a password and security key, but still cannot read a particular dataset. Which distinction explains this situation?

1. Authorization only means storing an audit log
2. Authentication guarantees access to every project
3. Authentication establishes identity; authorization determines the permitted dataset access
4. Encryption replaces all identity and permission checks