CATEGORY 8 / 59

Autorisations / droits / rôles

17 checks in the reference catalogue. Each row appears under this category in AxiSecurity campaigns and full reports.

Badge guide: Free = passive diagnostic or public signal; Paid = bounded or authenticated automated/technical check; Expert = internal evidence, human audit, controlled load or mandate-based penetration testing.

C08-T001
source 4

Contrôle horizontal des accès

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T002
source 4

Contrôle vertical des accès

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T003
source 4

IDOR / BOLA

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T004
source 4

Accès direct aux fichiers

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T005
source 4

Accès direct aux documents

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T006
source 4

Changement d'identifiant dans URL

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T007
source 4

Changement d'identifiant dans API

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T008
source 4

Tentative utilisateur vers admin

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T009
source 4

Tentative admin vers superadmin

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T010
source 4

Test rôle supprimé

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T011
source 4

Test utilisateur désactivé

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T012
source 4

Moindre privilège

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T013
source 4

Séparation agents / administrateurs

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T014
source 4

Séparation collectivités / tenants

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T015
source 4

Isolation multi-tenant

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T016
source 4

Contrôle des permissions côté serveur

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C08-T017
source 4

Absence de contrôle uniquement JavaScript

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope