Recently, in building apps, I've changed how I do accounts. Previously everyone was a "user" and permissions got managed by ACL (yes, yes, I know not the best s

Recently, in building apps, I've changed how I do accounts. Previously everyone was a "user" and permissions got managed by ACL (yes, yes, I know not the best security model..). Now I give each type of user their own model. So... "customer", "employee", "admin" for example. This is interesting because when you write code it is instantly apparent who is the focus of an action. It also helps model how the accounts interact with each other.