Cornucopia - Ecommerce Website - AZ 7

Suit: Authorization

Card/Value: 7

Description:
Yuanjing can access application functions, objects, or properties he is not authorized to access.

Technical Note:
Implement least privilege, and restrict users to only the functionality, objects and properties that are required to perform their tasks.

NB: the key concept for this card is applying function/object/property authorization controls. See AZ 5 for resource type controls, and AZ 6 for data controls.

References:
« Previous Card | Authorization | Next Card »