OWASPASVS 5.0 requirement
ASVS-V8.3.1 The application enforces authorization rules at a trusted service layer and doesn't rely on controls that an untrusted consumer could…
- Standard
- OWASP ASVS 5.0
- Chapter
- V8 Authorization
- Section
- V8.3 Operation Level Authorization
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that the application enforces authorization rules at a trusted service layer and doesn't rely on controls that an untrusted consumer could manipulate, such as client-side JavaScript.