4.9 Access control rules are enfoced server sideΒΆ

Verify that the same access control rules implied by the presentation layer are enforced on the server side.

Levels: 1, 2, 3