4.11 Access controls are enforced on the server sideΒΆ

Verify that there is a centralized mechanism (including libraries that call external authorization services) for protecting access to each type of protected resource.

Levels: 3