the user

administrator should have the ability to create other users.

all

users should be restricted to the lowest level of privilege.

users should have the least privilege required

for their intended purpose.

the

database should have limited access to local resources.