Guide
All articles tagged Guide.
Broken Access Control is the #1 issue in OWASP 2021 Top 10
The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. Many will be familiar with the OWASP Top 10 which is published every few years and is used as the standard for evaluating the security of web applications. The 2021 T...
The never-ending product requirements of user authorization
This article first appeared on alexolivier.meI’ve been fortunate to work as a Product Manager across eCommerce, Marketing, Supply Chain, Fitness and Finance, and ...
The Case for Granular Permissions
Presenting the case for granular permissions to help you select the right authorization scheme to make authorization easier.
Changing Business Logic in an Evolving System
Have you ever had to change existing business logic that was hard to understand? Did it break unrelated parts of the system when it was changed? Perhaps it had really poor documentation.Some of the most difficult software projects I’ve worked on involved working with and main...
The Hidden Costs of User Authorization
Authentication and authorization are the two central pillars of security of any application. Authentication is the identification of valid users and authorization is the process of determining what those users are allowed to do. User authorization plays a crucial role in securing access to your a...