Lexicon

Authenticated-Equals-Authorized

Kind: anti-pattern

Layer: Security Core

Record: lexicon:authenticated-equals-authorized

Canonical: Lexicon

Conflating authentication with authorization, so any authenticated caller is granted access without a permission check.

Listed in Lexicon terms, after Assumption-Driven Security and before Broad Admin Access.

Category

  • Security Privacy Compliance

Negated by

  • Authorization

Linked from

  • Security / Privacy / Compliance / Governance