Safety & Security
Complete Mediation
Checking authority for every protected access rather than assuming an earlier check covers all later paths. This includes alternative endpoints and cached results. Permission changes must be reflected according to the system's security requirements; checking only a login screen is not sufficient.
Reviewed
Sources
Member lesson
The definition and sources are public. The complete practical lesson is for members.