If you have to give them additional privileges, compartmentalize that extra boost to their security profile, then take that privilege away as soon as they're done working.
如果您为他们提供了其他权限,将这些额外的权限限制在其安全概要中,然后在完成工作后收回这些权限。
2
Again, in Figure 7, no additional option is provided, so only the owner has the execution privilege to the package.
同样,在图7中,没有提供附加选项,因此只有所有者才拥有包的执行权限。
3
Describes granting permissions using the principle of least privilege and provides links to additional resources.