rspec/rules/S5808/summary.adoc

2 lines
259 B
Plaintext
Raw Permalink Normal View History

When granting users access to resources of an application, such an authorization should be based on strong decisions. For instance, a user may be authorized to access a resource only if they are authenticated, or if they have the correct role and privileges.