Granting access should be harder than revoking it
Most permission systems make adding and removing a user mirror images of each other. They should not be. A note on asymmetry, written while adding roles to our own admin panel.
Why this site has no login form
The admin panel behind pontelon.com stores no passwords, no password hashes and no sessions of its own. Here is what that buys, and what it costs.
An audit log with a delete button is a diary
Append-only is not a database feature you enable. It is a property you have to refuse to break, in every layer, every time somebody asks.