OWASPASVS 5.0 requirement

ASVS-V8.2.1 The application ensures that function-level access is restricted to consumers with explicit permissions.

L1 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V8 Authorization
Section
V8.2 General Authorization Design
Level
L1 (requirement applies from this verification level up)

Requirement

Verify that the application ensures that function-level access is restricted to consumers with explicit permissions.