OWASPASVS 5.0 requirement
ASVS-V8.1.2 Authorization documentation defines rules for field-level access restrictions (both read and write) based on consumer permissions and…
- Standard
- OWASP ASVS 5.0
- Chapter
- V8 Authorization
- Section
- V8.1 Authorization Documentation
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that authorization documentation defines rules for field-level access restrictions (both read and write) based on consumer permissions and resource attributes. Note that these rules might depend on other attribute values of the relevant data object, such as state or status.