In this case there is no action at all on the users part.<p>&gt; As soon as he clicked that debug link or the detail link, he was intentionally accessing information without authorized access<p>No he was not, he was accessing information because he did not know what it was (not explicit enough) and have been authorized to do it by Gmail. In both cases you are quoting, there is work done on the user part to access the information, in this case there is not.