+CON.10.A2 Access Control for Web Applications (B)

CON.10.A2 Access Control for Web Applications (B)

An authorisation component MUST be used by Developers to ensure that users can only perform actions for which they are authorised. Every attempt to access protected content and functions MUST be checked before being allowed.

The authorisation component MUST consider all the resources and content administered by a web application. If the corresponding access control system is defective, access MUST be denied. Access control MUST also be in place for URL calls and object references.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
blocks G 0.28 Software Vulnerabilities or Errors