If you have to give them additional privileges, compartmentalize that extra boost to their security profile, then take that privilege away as soon as they're done working.
如果您为他们提供了其他权限，将这些额外的权限限制在其安全概要中，然后在完成工作后收回这些权限。
2
Again, in Figure 7, no additional option is provided, so only the owner has the execution privilege to the package.
同样，在图7中，没有提供附加选项，因此只有所有者才拥有包的执行权限。
3
Describes granting permissions using the principle of least privilege and provides links to additional resources.