Insights
What we learned building it
Notes from real engagements and from our own systems. Every piece here describes something we actually shipped, including the parts we would do differently.
Granting access should be harder than revoking it
Most permission systems make adding and removing a user mirror images of each other. They should not be. A note on asymmetry, written while adding roles to our own admin panel.
ReadWhy this site has no login form
The admin panel behind pontelon.com stores no passwords, no password hashes and no sessions of its own. Here is what that buys, and what it costs.
ReadAn audit log with a delete button is a diary
Append-only is not a database feature you enable. It is a property you have to refuse to break, in every layer, every time somebody asks.
Read