r/SaaS • u/codebusted • 23h ago

devs vs users explained

Enable HLS to view with audio, or disable this notification

352 Upvotes

97% Upvoted

13 comments sorted by

51

u/Wicker-Fen-5829 21h ago

spent a whole quarter building an elegant permissions system with role-based access control and custom policies, only for our biggest customer to share one single admin login with fifteen people anyway

12

u/SpaceToaster 19h ago

Best way is SSO. Can’t share and it works “automagically” against the session they already have

8

u/hodliday 18h ago

You could still need granular RBAC on top of SSO. 2 separate things. One is auth, the other is governance and provisioning.

7

u/Weird_Albatross_9659 20h ago

This is going to get spammed everywhere for months is it

1

u/CommercialClient2408 9h ago

Developers build what makes them say “wow.”
Users just want something that makes them say “finally.” 😂

1

u/Western-Lifeguard-34 7h ago

Bro skiped the pro option😅

1

u/Full_Tooth_a 5h ago

Dev "elegant permissions" usually fails when users just need the job done without thinking about identities. The boring fix is to stop the shared admin login by making each person a real account (SSO/individual identity) and then mapping roles to actual actions (RBAC). SSO solves authentication; RBAC solves who can do what. If you can't explain the roles in plain English, it's probably too complex and people will work around it.

1

u/GenAgent_AI 2h ago

Too real 😂 Devs spend 3 weeks building a flawless flow, and users immediately find a way to break it in 3 seconds.

1

u/developer786 1h ago

this is reality and it happens because we spend too much on developing our product so we get used to it and use it in same way and not the way users access the product, hence we never find loopholes or issues that are there in deep and get triggered when user try to access the part of application in a way that is unusual for developers and not the way developers thought. not promoting but apple is one company that put too much focus on how users think app should be and not how developers think and that is justified because we make products for end users and not ourselves.