4 ms·

I believe you described the principle of least privilege, or something similar to it. https://en.wikipedia.org/wiki/Principle_of_least_privilege https://en.wik

• bombcar 5y ago
  And it can go further - things like “I can look at any record in the database” and “I can run any sql query against it but only get a max of C results per hour” or similar to prevent exfiltration without preventing work against the dataset.