Following sound security management procedures (separation of duties, etc) this is an issue for *change control*.

Why give the admin the ability to run the server that serves as an audit log for his actions?

If the site's so small they can't afford to run a change control process, they're not going to properly implement this to provide adequate assurance.

If the admin screws up he can just go back in and modify the blog to cover his bum.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/173/21034#21034