I was given a complicated task of redesigning an outdated security model. After conducting research, and before we started designing, I defined these four guiding principles to ensure the design decisions we made along the way did not set us off course.
To see how I designed the final solution check out Security Model Redesign.