A nice overview of the concepts behind user/account/identity/role modeling in applications.

I liked this quote in particular:

The tradeoff of creating more abstraction layers provides, as always, flexibility at the cost of complexity. Often times we resort to inferior workarounds because they seem simpler, when in truth they are just dumbing down the problem. KISS is not a synonym for “half assed”.