Test Role Definitions (OTG-IDENT-001)

From OWASP
Revision as of 09:19, 28 July 2013 by Andrew Muller (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Contents

Summary

It is common amongst modern enterprises to define system roles to manage users and authorization to system resources.

Test objectives

Validate the system roles defined within the application sufficiently define and separate each system and business role

How to test

Example

Tools

References

Role engineering and RBAC standards

Remediation