AC-6

Employ the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) that are necessary to accomplish秉持最小权限原则，仅允许为完成必要任务而授权的用户（或代表用户行为的进程）进行访问。