LOL.
Half right.
It's a pre-condition on all the Use Cases that only exist for a logged in Actor.
Where do you describe all of the user interactions that are required to successfully achieve a log in.
Allow for in and out of radio range (a third party network), on and off a local network, the different authentication methods supported (biometric, physical tokens, etc.).
Are you going to put that into every Use Case? Of course not, those things have to have taken place before that use case starts.
Where then? The supplementary spec?
You're jumping through a lot of hoops to avoid the obvious.
Even if you're talking about a simple system that lets strangers log in online, where are you recording the different user experiences according to the login method. (Create an account, Face-book login, Google login, Paypal login etc.)
Are these user interactions a secret or something?
