You’re building a document management system. Your first instinct is simple: editors can do everything, and everyone else is locked out. But then requests start arriving.
Legal needs to export PDFs. You make them editors. A week later, you realize they’ve accidentally deleted three documents.
Finance needs to print reports. You add them to the editor role too. Now they’re changing numbers.
Customer success wants to view documents in fullscreen during calls. You give them editor access because that’s the only way to unlock fullscreen. They’re now modifying customer contracts.
Each time, the reasoning is the same: “We just need them to have access to one thing.” Each time, you grant a role full editing permissions because your editor only understands two states — completely on or completely off. There is no middle ground.
