the user

administrator should have the ability to create other users.

the

database should have limited access to local resources.

users should have the least privilege required

for their intended purpose.

all

users should be restricted to the lowest level of privilege.