1.4.4 TODOΒΆ

Verify the application uses a single and well-vetted access control mechanism for accessing protected data and resources. All requests must pass through this single mechanism to avoid copy and paste or insecure alternative paths. (C7)

Level 1  
Level 2 X
Level 3 X
CWE NIST
284