So I am developing an employee management application on behalf of a company and am concerned about the extent of rights and capabilities that are to be bestowed upon registered administrator accounts.
Here's the question under a philosophical light: "What is to be done when the one with power is corrupt?"
Here's the question under a more practical example: "What is to be done when the one in charge of a bank is corrupt?"
Now I'm not even suggesting that the company is corrupt, but I am wondering if there are some, perhaps light-hearted, measures that can be put in place to avoid the potential of fraud that may be accessible to those with administrator powers.
It's not easy to find any information online in regards to this. How do people deal with this concerning issue? Surely it isn't to simply be dismissed; banks have authorities and standards they must adhere to, but what arbiter of justice resides in the land of software?
- Do I just trust the company that their appointed Administrators who deal with HR and registration of employees are reliable?
- Do I include analytical components that act as a light but unnoticeable deterrence e.g. if an administrator downloads a passport at a certain time, should this be backlogged in a database? If so, what should be done with it and who is it accessible by?