Lexicon

Anonymous Sensitive Access

Kind: anti-pattern

Layer: Security Core

Record: lexicon:anonymous-sensitive-access

Canonical: Lexicon

Permitting access to sensitive resources without first establishing the caller's identity.

Listed in Lexicon terms, after Ambient-Credential Trust and before Assumption-Driven Security.

Category

  • Security Privacy Compliance

Negated by

  • Authentication

Violates

  • Authentication

Linked from

  • Security / Privacy / Compliance / Governance