Security, privacy and access — least privilege as the default — RBAC and a masked-view pattern — and the breach that wasn't

Discussion for "RBAC and a masked-view pattern — and the breach that wasn't" (module: Security, privacy and access — least privilege as the default).