Restrict users to export only personal secrets

[vdberg (Martijn)]

I was also surprised to find this was possible.

@Erik

Practically, however, people are lazy when it comes to malicious activity (I say this as someone who has tracked down plenty of it). The percentage of people who will actually engage in the effort to manually copy out a set of passwords is pretty small. And on the flip side, most admin staffs are insanely overworked and a massive password change project will probably not happen as rapidly as it should. So while you’re absolutely correct in the sense that it can be worked around, its a lot more hassle than your image implies (at least for nontrivial implementations) and the reality is that it has some efficacy in many situations.

I totally agree. We did this for some time but changing passwords (especially for employees that have been with you for a long time or admins) this takes a huge amount of time. To add to this list: a malicious user could be deterred if they had to export passwors one-by-one instead of just dumping the entire database.