Rule of least privilege

From Wikipedia, the free encyclopedia

The rule of least privilege -- When we allow access to something, we should allow access to only those people who need it and under the context that they need it. Take exactly what access needs to happen and limit it directly to that. Assume that any other access is going to have an exploit around it.