Authorised / Unauthorised Change .... ?

Authorised / Unauthorised Change .... ?

What is logic by which DE judges if a change is authorised or not ?

Regards