New answers tagged

0

Eliminate the shared user accounts ASAP. The only time a shared user account is necessary, is when multiple people need to access an archaic system that only supports one (or maybe only a few) user(s). The only roles worth developing are likely going to be the user and administration roles (and maybe several administration roles.) The user role is likely ...


0

In short, they aren't, and can't. What they are probably doing is processing several electronic credit transactions. On a credit card, you can max it out (problem if the card doesn't have a hard-limit but has a soft-limit that you can go above and pay down to the soft-limit on your next bill,) and it'll prohibit further transactions, and since the funds are ...


0

I think there are multiple options for different purposes: Do you want to avoid your users use the same password for daily work and for administrative tasks (in order to limit the security threats if the commonly used password is stolen)? Do you want to limit the "power users" on some system while enabling them on others? Do you want to track (audit) you ...


0

In this case, it depends on what you want to achieve. The idea behind segreation, for example not running as root, but as a limited user for everyday activites, is that if the account is compromised for some reason, the damage is contained to the rights that the limited user account has. Segreation does NOT protect against malicious users, in the same way ...


7

You are right, just giving permissions to each user that needs them only ocasionally is not a good option. Sharing privileged accounts isnĀ“t an option too. Since you did not specified your environment, I will provide two answers: Linux/*nix You could give each administrator the option to escalate to a higher privilege level on his operational account. ...


1

You could build a login that creates a session with a certain user, who then get's some sort of tracking cookie or thing-ie. With this, you still could trace the user and his actions. Usually you do this by using a framework like Play! or Spring. Examples for Play! can be found here and here. The process is similar on different frameworks: User logs in - ...



Top 50 recent answers are included