[IMP] base: The default_user doesn't have 'Settings' access right

It's ok to give the 'Manager' rights to new users for small companies or new saas instances so that newly created users can direcly use all the features.

For bigger companies, someone is creating the new users and give the rights specifically according to their access rights in the company departments.

But granting administrator access by default is definitely questionable. The main admin is bound to make mistakes and fail to notice or remember that they have given admin access to new users. Making the system insecure by default is not a good trade-off for "simplifying the system for small businesses". And this will not be expected by anyone.

0 files changed, 0 insertions, 0 deletions