rspec/rules/S6302/description.adoc
hendrik-buchwald-sonarsource f090bdb790
Modify Rule S6302: Make generic and add GCP (#717)
* Rename rule

* Add GCP tag

* Fix typo

* Revert last commit

* Add GCP

* Add missing information

* Apply suggestions from code review

Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>

* Add more dashes

* improved old snippets (equal sign alignment)

* Add 2nd location message

Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2022-02-14 13:27:21 +00:00

2 lines
426 B
Plaintext

A policy that grants all permissions may indicate an improper access control, which violates https://en.wikipedia.org/wiki/Principle_of_least_privilege[the principle of least privilege]. Suppose an identity is granted full permissions to a resource even though it only requires read permission to work as expected. In this case, an unintentional overwriting of resources may occur and therefore result in loss of information.