Access control
Ownership checks, role boundaries, multi-tenant data, and authorization review.
- 001 Ownership checks and IDORs Learn Ownership checks and IDORs through a safe, repeatable access control workflow.
- 002 Role-based access control review Learn Role-based access control review through a safe, repeatable access control workflow.
- 003 Multi-tenant data boundaries Learn Multi-tenant data boundaries through a safe, repeatable access control workflow.
- 004 Horizontal vs vertical privilege Learn Horizontal vs vertical privilege through a safe, repeatable access control workflow.
- 005 Method confusion in authorization Learn Method confusion in authorization through a safe, repeatable access control workflow.
- 006 Object references in APIs Learn Object references in APIs through a safe, repeatable access control workflow.
- 007 Admin UI boundary testing Learn Admin UI boundary testing through a safe, repeatable access control workflow.
- 008 Shared resource permissions Learn Shared resource permissions through a safe, repeatable access control workflow.
- 009 Approval workflow bypasses Learn Approval workflow bypasses through a safe, repeatable access control workflow.
- 010 Centralized authorization patterns Learn Centralized authorization patterns through a safe, repeatable access control workflow.
- 011 IDOR numeric identifiers Learn IDOR numeric identifiers through a safe, repeatable access control workflow.
- 012 IDOR UUID identifiers Learn IDOR UUID identifiers through a safe, repeatable access control workflow.
- 013 IDOR in file downloads Learn IDOR in file downloads through a safe, repeatable access control workflow.
- 014 IDOR in exports and invoices Learn IDOR in exports and invoices through a safe, repeatable access control workflow.
- 015 IDOR in nested resources Learn IDOR in nested resources through a safe, repeatable access control workflow.
- 016 Role matrix design Learn Role matrix design through a safe, repeatable access control workflow.
- 017 Permission inheritance mistakes Learn Permission inheritance mistakes through a safe, repeatable access control workflow.
- 018 Organization switching bugs Learn Organization switching bugs through a safe, repeatable access control workflow.
- 019 Tenant isolation test cases Learn Tenant isolation test cases through a safe, repeatable access control workflow.
- 020 Invite flow authorization Learn Invite flow authorization through a safe, repeatable access control workflow.
- 021 Ownership transfer workflow Learn Ownership transfer workflow through a safe, repeatable access control workflow.
- 022 Feature flag authorization Learn Feature flag authorization through a safe, repeatable access control workflow.
- 023 Admin impersonation review Learn Admin impersonation review through a safe, repeatable access control workflow.
- 024 Read vs write authorization gaps Learn Read vs write authorization gaps through a safe, repeatable access control workflow.
- 025 Delete endpoint authorization Learn Delete endpoint authorization through a safe, repeatable access control workflow.
- 026 Authorization caching mistakes Learn Authorization caching mistakes through a safe, repeatable access control workflow.
- 027 Policy as code review Learn Policy as code review through a safe, repeatable access control workflow.
- 028 Deny by default patterns Learn Deny by default patterns through a safe, repeatable access control workflow.