OWASPASVS 5.0 requirement
ASVS-V8.2.2 The application ensures that data-specific access is restricted to consumers with explicit permissions to specific data items to mitigate…
- Standard
- OWASP ASVS 5.0
- Chapter
- V8 Authorization
- Section
- V8.2 General Authorization Design
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that the application ensures that data-specific access is restricted to consumers with explicit permissions to specific data items to mitigate insecure direct object reference (IDOR) and broken object level authorization (BOLA).