Term Kind Topic What it is
Administrative Path Blindness Support Tool Gap, Internal Access Blind Spot concept Authorization The pattern where the customer-facing data path is rigorously access-controlled while internal dashboards, support tools, analytics jobs and exports have unrestricted access - protecting against the wrong adversary.
Confused Deputy concept Authorization A privileged component tricked into performing an action on behalf of a caller who lacks the authority to perform it directly.
Object-Level Authorization BOLA, IDOR concept Authorization Checking that the caller is entitled to the specific record they requested, not merely that they may call the endpoint.
Relationship-Based Access Control ReBAC, Graph Authorization concept Authorization Expressing permissions as relationships between subjects and objects, with inheritance and group expansion as rules over the graph, rather than as attributes on rows.
Role Explosion concept Authorization The proliferation of narrowly-scoped roles that occurs when RBAC is used to express rules that actually depend on context.