# Authorization Scattering

Record: `arch:authorization-scattering`
Kind: anti-pattern
Layer: [Enforcement Core](https://banes-lab.com/records/layer/enforcement-core.md)
Severity: discouraged
Scope: security_governance, model_governance
Canonical: https://banes-lab.com/ontology#arch-authorization-scattering

## Repair

- Refactored by: centralize_policy, [policy_as_code](https://banes-lab.com/records/arch/policy-as-code.md), ABAC_or_RBAC_model, authorization_tests
- Detected by: repeated_role_checks, missing_policy_engine, endpoint_without_authz, inconsistent_resource_access
- Violated by: Spread authorization checks across controllers, services, repositories, UI, and ad hoc conditionals without a central policy model.

## referenced-by

- [Authorization](https://banes-lab.com/records/arch/authorization.md)