Tech Glossary
Permissions, Roles (RBAC) and Audit Logs: The Three Line Items That Decide Whether an Ex-Employee Can Still See Your Customer List
A quote line that reads "user permission management module: NT$45,000" makes most owners of a twelve-person company ask whether they really need it. This piece answers that with one analogy running the whole way through: a hotel keycard system. Permissions are which doors a card opens. RBAC — role-based access control — means you issue cards to job titles rather than to individual people, so a new hire is set up in thirty seconds and a leaver is locked out in one action. An audit log is the record inside the door lock showing who opened which door and when. You get a real role design for a building-materials trading company, the five questions to ask a vendor when these three terms appear on a quote, the two-to-three-times cost penalty for retrofitting permissions after launch, the compensation and fine ranges Taiwan's Personal Data Protection Act sets out when a customer list leaks, the three misconceptions that cost the most money, and an eight-item health check you can run on your own system this afternoon. The goal is simple: before you sign, know whether you are buying real server-side access control or just hidden buttons.
Read More