Authorization

Checking what an already-authenticated user is permitted to do with a specific resource. Must happen on the server, on every request.

Learn it hands-on

• Broken Access Control Medium