Least-right access is used, and you can logs are looked from time to time