Authentication should be required to access the SwissCenter configuration pages.

On installation, the default user should be given administrator privileges and not be assigned a password. In this situation, configuration should only be possible from the local machine.

The config pages should allow you to grant or revoke administrator privileges from any user, regardless of whether they have a password assigned to the account or not. However, there must always be at least ONE administrator.