Hardcoded Rules

Kind: anti-pattern

Layer: Security Core

Record: lexicon:hardcoded-rules

Canonical: Lexicon

Embedding access rules directly in code, so changing policy requires a code change and cannot respond to runtime attributes.

Listed in Lexicon terms, after Broad Admin Access and before Hardcoded Secrets.

Category

Violates

Negated by

Linked from