I have seen some sites where they create a rootuser user for the
root role, or a site_admin user for the admin role.

This defeats the purpose of roles!

You can give rights and privileges to users anyway, the reason to
give them to a role instead is so that you know exactly which human 
being did what.

If 5 people have the passwords to site_admin and admin, you don't
have accountability.

If Tom Jones, Jin Tan, and Victoria Basjanac all have the admin
role and password, then audit records will show which one created
user "let_me_in_to_hack" or gave "nuke everything" privs to
"joe_outsider."

Roles are meant to be a paradigm change.

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@


Reply via email to