least privilege

Giving each person or service only the rights it needs. Kettle & Crane's shipping service gets shipping data only, and the confirmation function should only read orders and send email.