Read/Write versus Create/Read/Update/Delete permissions difference

Posted by archmeta on Stack Overflow See other posts from Stack Overflow or by archmeta
Published on 2011-11-14T09:47:23Z Indexed on 2011/11/14 9:50 UTC
Read the original article Hit count: 209

Filed under:
|
|

From a practical standpoint, is there any real-world difference between Read/Write permissions and Create/Read/Update/Delete permissions?

It would seem that if a user had the ability to 'create', he should always have the ability to 'update' or 'delete'? If this is correct, then read/write should always be sufficient, and there is no need to store separate Create/Read/Update/Delete permissions?

Are there any real-world use cases in which a user should be given permissions to create but not update, or update but not delete, etc...?

© Stack Overflow or respective owner

Related posts about security

Related posts about permissions