>Another possibility is that Snowden had the ability to create login credentials and just gave himself the ability to log in as another user. This is called "s

>Another possibility is that Snowden had the ability to create login credentials and just gave himself the ability to log in as another user. This is called "seperation of duties" and it's covered in the RBAC security model.