authorization

Granting access should be harder than revoking it

Most permission systems make adding and removing a user mirror images of each other. They should not be. A note on asymmetry, written while adding roles to our own admin panel.