Web Application Security
Server-Side
Authorization and Access Control
Authorization determines what an authenticated user is allowed to access or perform. Access control ensures these permissions are enforced so users cannot access resources or functionality beyond their assigned privileges.
Topic overview
7
Lessons
7
Featured
Learning lessons
Learn Authorization and Access Control
Work through the lessons in order and build your understanding step by step.
1
What Is Authorization
Intermediate
15 min
Featured
2
Access Control Models Explained
Intermediate
15 min
Featured
3
Common Access Control Vulnerabilities
Intermediate
15 min
Featured
4
Horizontal Privilege Escalation
Intermediate
20 min
Featured
5
Vertical Privilege Escalation
Intermediate
15 min
Featured
6
How to Test for Authorization Vulnerabilities
Intermediate
15 min
Featured
7
How to Prevent Authorization Vulnerabilities
Intermediate
15 min
Featured