Explicit is better than implicit
trevorlasn.com
trevorlasn.com
You can certainly make that design decision, but I think my take of “explicit is better than implicit” is to let the server logs complain about invalid roles (and then rejecting access, even if a guest would’ve had access).