Let's say you have a website receiving 1 million requests per day. 0.01% of those are admin requests that need to know if your are an admin to execute them. It would be wasteful to check with the database if you are an admin for every request, when only a tiny minority of then needs to know that. So for 999.900 of the requests isAdmin will be null. We don't know if the user is an admin and we don't need to know.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
replies: