Module
Authorization Models and Access Control
Sign in to add this module to your path and practice.
About
Discretionary vs. mandatory access control, ACLs, capabilities, RBAC, ABAC; enforcing complete mediation and least privilege in code and systems.
Goal
Map roles/permissions for a sample application and write or review authorization checks that avoid IDOR and privilege-escalation bugs.
Unlocks
Tutor
Ask questions about this module.
Hi — I'm your tutor for Authorization Models and Access Control. Ask about the concepts, goal, or where you're stuck.