Being an info security professional, I am dead against giving someone else online access, children inclusive. It violates the terms and conditions of online use for both the parents and the son. The HOA can show that there is violation of online use terms - and it is not difficult to show who has been the beneficiary of the accomodation and hold the son accountable for ownership of the timeshare on his parents' passing. Now, with authorization, as what Denise suggested in the last sentence, it would be entirely appropriate.