Forum OpenACS Q&A: Re: RFC: Security policy for OpenACS (Security hole in OpenACS 5.1!)

saying "one or two things like granting site-wide admin priviledges should require additional authentication" is a very different thing from Dirk suggesting that regular users should be distinct from admin users.