https://nalar.dev/tags/identity-security/ Recent content in Identity Security on Nalar Hugo en-us Sun, 06 Sep 2026 00:00:00 +0700 https://nalar.dev/review-access-before-privileges-become-permanent/ Sun, 06 Sep 2026 00:00:00 +0700 https://nalar.dev/review-access-before-privileges-become-permanent/ <p>Access control can be correct on the day a permission is granted and still become risky later. A developer changes teams but keeps access to an old production project. A contractor finishes an engagement while a group membership remains active. A service account stops using a privileged operation, but its role is never reduced.</p> <p>None of these cases requires a broken authorization check. The system may enforce every permission exactly as configured. The problem is that the configured access no longer matches the current need.</p>