10. Identify security requirements
Check validation, identity, permissions, encoding, secrets, audit needs, and least privilege.
What it is
Check validation, identity, permissions, encoding, secrets, audit needs, and least privilege.
When to use it
Workflow step 10 of 17. Apply before moving to the next decision.
Syntax
10. Identify security requirements
Check validation, identity, permissions, encoding, secrets, audit needs, and least privilege.Example
Validate positive integer amount.
Authorize source ownership.
Bind SQL values.
Protect browser mutations with CSRF.
Avoid logging secrets.Common mistakes
Skipping this decision makes later implementation depend on unstated assumptions.