Authorization Audit
saas-authorization · v1.1.0 · paid
Authorization layer assessment covering access control, resource authorization, API permissions, and admin boundary enforcement.
Access Control Model
access-control · weight 0.3
Resource Authorization
resource-auth · weight 0.35
- criticalEvery API Route Checks Permissionsab-002249
- criticalResource Ownership Verifiedab-002252
- criticalNo Insecure Direct Object References (IDOR)ab-002244
- highFile Upload Permissions Scoped to Userab-002241
- highShared Resources Have Access Controlsab-002235
- mediumBulk Operations Verify Per-Resource Permissionsab-002240
API Authorization
api-auth · weight 0.2
Admin & Privilege Escalation
admin-privilege · weight 0.15
- criticalAdmin Routes Protected with Role Checkab-002270
- highNo Privilege Escalation via Parameter Tamperingab-002267
- highSensitive Operations Require Re-authenticationab-002269
- highMulti-Tenant Data Isolation Enforcedab-002272
- highDatabase Queries Scoped to Tenantab-002268
- highNo Cross-Tenant Data Leakage in List Endpointsab-002266