+APP.4.6.A4 No Proprietary Authorisation Checks (B)

APP.4.6.A4 No Proprietary Authorisation Checks (B)

Each authorisation check MUST be carried out using the AUTHORITY CHECK command provided for this purpose. Proprietary authorisation checks (e.g. based on user names) MUST NOT be used.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information