Should you manage roles and permissions with a UI?

Just about every application needs the concept of roles and permissions. Often, there's a desire to allow non-developers to manage roles and permissions in the application interface, but is that a good idea?(00:00) - Roles and permissions landscape (01:45) - A UI for managing permissions? (04:14) - Rolling out new permissions via migrations (06:45) - What about managing roles in a UI? (09:00) - Covering permissions in tests (10:30) - Maybe a read only UI? (10:55) - Silly bit The validation worksheet has been retired, but check out our validation book.