OWASPASVS 5.0 requirement
ASVS-V8.1.3 The application's documentation defines the environmental and contextual attributes (including but not limited to, time of day, user…
- Standard
- OWASP ASVS 5.0
- Chapter
- V8 Authorization
- Section
- V8.1 Authorization Documentation
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that the application's documentation defines the environmental and contextual attributes (including but not limited to, time of day, user location, IP address, or device) that are used in the application to make security decisions, including those pertaining to authentication and authorization.