{
  "code": null,
  "collection": "lexicon",
  "href": "https://banes-lab.com/ontology/lexicon#lexicon-broad-admin-access",
  "id": "broad-admin-access",
  "kind": "anti-pattern",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-security-core",
    "json": "https://banes-lab.com/json/records/layer/security-core",
    "label": "Security Core",
    "markdown": "https://banes-lab.com/records/layer/security-core.md",
    "ref": "layer:security-core"
  },
  "name": "Broad Admin Access",
  "ref": "lexicon:broad-admin-access",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance",
          "json": "https://banes-lab.com/json/records/lexicon-category/security-privacy-compliance",
          "label": "Security Privacy Compliance",
          "markdown": "https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md",
          "ref": "lexicon-category:security-privacy-compliance"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-least-privilege",
          "json": "https://banes-lab.com/json/records/architecture/least-privilege",
          "label": "Least Privilege",
          "markdown": "https://banes-lab.com/records/architecture/least-privilege.md",
          "ref": "architecture:least-privilege"
        }
      ],
      "relation": "negated-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-least-privilege",
          "json": "https://banes-lab.com/json/records/architecture/least-privilege",
          "label": "Least Privilege",
          "markdown": "https://banes-lab.com/records/architecture/least-privilege.md",
          "ref": "architecture:least-privilege"
        }
      ],
      "relation": "violates"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "Granting sweeping administrative privileges by default instead of the least access each role requires.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology/lexicon#lexicon-hardcoded-rules",
      "json": "https://banes-lab.com/json/records/lexicon/hardcoded-rules",
      "label": "Hardcoded Rules",
      "markdown": "https://banes-lab.com/records/lexicon/hardcoded-rules.md",
      "ref": "lexicon:hardcoded-rules"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology/lexicon#lexicon-authenticated-equals-authorized",
      "json": "https://banes-lab.com/json/records/lexicon/authenticated-equals-authorized",
      "label": "Authenticated-Equals-Authorized",
      "markdown": "https://banes-lab.com/records/lexicon/authenticated-equals-authorized.md",
      "ref": "lexicon:authenticated-equals-authorized"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/lexicon",
    "label": "Lexicon terms",
    "markdown": "https://banes-lab.com/api/records/lexicon.md",
    "ref": "api:records/lexicon"
  },
  "aliases": []
}