[numbsafari]

> Really ACLs have nothing to do with enterprise, but some safety is needed.

Huzzah!

Let’s stop calling basic security features “enterprise”.

Locking basic security features behind a paywall is a protection racket, pure and simple.

Small companies, and lone developers, need security, too.

If we are making software for consumers who won’t know any better, why not encourage (and make it trivial) for fledglings to do the right thing from the very beginning?

Why does every single company have to go through the same security mistakes on their way to Series A/B/C? Why can’t we learn from our mistakes and make the doing the right thing not just accessible, but easily accessible.

Hat tip to antirez, et.al., on this one.

[PeterCorless]

1000%. Basic security (and that includes an evolving basket of features) are not just for "enterprise." Neither from the developer's POV nor a user's. How many database hacks do people have to have reported as front page news about unsecured databases — where users didn't even change default security credentials — before people finally get that any database running anywhere is at risk — even on-prem with only your own people accessing it. Security is not an "advanced" feature. It is a foundational requirement before you even load data into a cluster.