Threat Analysis

In earlier videos, you learned about the difference between authentication and authorization. In this video, you will learn about broken access control and flaws around the role of authorization in securing a system.

Investigate and share: If you are running an online business, would you use role-based access control, and would you allow anonymous users? Explain your reasoning here.