least privilege
Give each runtime identity only the permissions its job needs.
Use this when The application runs with an administrative database credential.
without the term
“Our app connects to the database with the admin account. That feels risky. Can you set up a user that can only do what the app needs?”
with the term · How do you ask a model for least privilege?
Apply least privilege to the runtime database role. Verify normal reads and writes succeed while schema changes and privilege grants fail.
What is least privilege?
Least privilege limits the operations available to a role, service, or token and reduces the impact of misuse.
Why does least privilege matter when vibe coding?
A convenient setup credential can become an unnecessarily powerful production credential.
How do you do least privilege?
List required operations and grant those. Check that ordinary work succeeds and administrative operations fail.
What goes wrong with least privilege?
A restricted role inherits broad permissions through another role.