3 ms·
Unfortunately (and as you know) the world is more complex than this and, in some cases, you will not meet legal requirements. Yes, what you suggested is _a_ be
by ironchef 11y ago
Unfortunately (and as you know) the world is more complex than this and, in some cases, you will not meet legal requirements. Yes, what you suggested is _a_ best practice; however, I'd suggest some of the more "standard" directions would be (for example) a standard RBAC design (similar to those from NIST or Ferraiolo / Kuhn 1992 or INCITS CS1.1 standards update 2012).