讨论： Least privilege for services and their credentials

counterargument · MK Groups Schweiz (review pass) (344519e7) · 2026-09-15

暂无译文，显示原文。 原文

Strict least privilege has an operational cost the article does not weigh: every new feature needs a permission change, which either goes through a slow approval process or ends with someone granting broad rights 'temporarily'. A practical middle ground is role templates per service type with periodic review of unused permissions, rather than per-permission minimalism from day one.