LHDI Countermeasures - Architecture and Design Priority 8-9

department-of-veterans-affairs / va.gov-team

Public resources for building on and in support of VA.gov. Visit complete Knowledge Hub:

281 stars 198 forks source link

Open lmorris3 opened 5 months ago

lmorris3 commented 5 months ago

[ ] T14: Enforce the principle of least privilege (9)
[ ] T15: Centralize authorization (9)
[ ] T18: Make authorization decisions using full context (9)
[ ] T373: Design and regulate access to unauthenticated parts of the application (8)

skirkman16 commented 5 months ago

Anu is currently working on T14

schisslerg commented 4 months ago

Anu will capture additional context that came in from Yardén prior to moving this to icebox

moanu404 commented 2 months ago

Moving to icebox - future steps would be to implement route protection via auth and implement roles and privelege levels in our app