Declarative users
The Open Web Application Security Project (OWASP) – https://owasp.org – is a nonprofit foundation that does a lot of work with regard to web application security. Their most well-known project is the OWASP Top Ten (https://owasp.org/www-project-top-ten/), which is a list of the most important risks to consider when it comes to the security of our web applications. They update this list every few years. Currently, in their latest version, which is from 2021, so brand new, we have in first place Broken Access Control (it was in the fifth position on the previous 2017 list). Since the primary goal of the Top Ten is to bring awareness in the community about the major web security risks, we can understand with Broken Access Control being at the top that it is critical to do a proper setup for our users and the kind of access everyone gets in order to not violate the principle of least privilege. It would be common for our development teams to get write access...