OWASPASVS 5.0 requirement
ASVS-V7.4.2 The application terminates all active sessions when a user account is disabled or deleted (such as an employee leaving the company).
- Standard
- OWASP ASVS 5.0
- Chapter
- V7 Session Management
- Section
- V7.4 Session Termination
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that the application terminates all active sessions when a user account is disabled or deleted (such as an employee leaving the company).