3 ms·
> Consider, why not support all users being able to just login to the systems that run the application? It is ultimately the same argument, no? I don't know wh
by dpark 10y ago
> Consider, why not support all users being able to just login to the systems that run the application? It is ultimately the same argument, no?
I don't know what this means.
I don't think there's a good argument for having multiple auth systems in general, much less three. It's a lot of redundancy for little reason. It ends up complicating every app as they end up needing to support multiple systems to support both end users and administrators.
I wouldn't be surprised to find that Google has a single auth system for all users, including employees, and that they've wired up their databases to honor the single auth source.
- taeric 10y agoMy point is this doesn't end at the database. So, you can successfully let the database manage users and access permissions to the data in the database. But then, why not let the operating system that the database is running on control that? And how is that a different argument than what you are proposing here?
- dpark 10y agoAll I was saying is that we already have auth systems and don't use them. The DB has auth. As you noted, your OS has auth. And yet we insist on reimplementing auth for our users again and again (often with terrible flaws). It does feel like something is wrong with this.