Re: Never under estimate the ability of a user to out stupid you
"I was on holiday and as my boss "had to have my login credentials in case anything bad happened""
a) In a properly designed system, that is not necessary.
b) Always have your Boss write down the login details ... but transpose two letters/numbers so they are non-functional. After you get home, the implication is the Boss made the mistake. Change the login details immediately afterwards.
b') Alternative to the above: always have a dummy account ready for this purpose. It's not like the Boss would know what to do with the real one ...