1.4.3 TODO

Verify enforcement of the principle of least privilege in functions, data files, URLs, controllers, services, and other resources. This implies protection against spoofing and elevation of privilege.

Level 1
Level 2	X
Level 3	X

CWE	NIST
272