OWASPASVS 5.0 requirement
ASVS-V8.1.1 Authorization documentation defines rules for restricting function-level and data-specific access based on consumer permissions and…
- Standard
- OWASP ASVS 5.0
- Chapter
- V8 Authorization
- Section
- V8.1 Authorization Documentation
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that authorization documentation defines rules for restricting function-level and data-specific access based on consumer permissions and resource attributes.