ASVS Requirement 8.1.1

Description

Verify that authorization documentation defines rules for restricting function-level and data-specific access based on consumer permissions and resource attributes.