Authentication and Authorization article suggestion

IDPros / bok

This is a public comment environment for the IDPro body of knowledge.

70 stars 26 forks source link

Open hlflanagan opened 2 years ago

hlflanagan commented 2 years ago

Can the authorization component of this article be expanded to include information on:

the primitives of the authorization space (permissions, privileges, scopes, principals, groups, roles)
the basics of privilege escalation attacks
more about privilege elevation
when it to use a trusted subsystem (can I get into all the roller coasters if I buy a ticket? Or do some of them have height restrictions?)

hlflanagan commented 1 year ago

This may need to go into a more detailed article on authorization, esp. the potential for privilege escalation attacks.