A page hides an approval action from ordinary users. What must the service still enforce?

1. That every ordinary user has administrator privileges
2. That the action name is difficult to guess
3. That the authenticated caller is authorized to approve the specific business record
4. That the browser uses the approved button color