Matching Pu-pPucmS

URI: MP-Pu-pPucmS

Description: Finds a client that forwards credentials to at least one service, and uses another process as a service without doing the same.

Root Pattern: R-CuP

R-CuP

Finds a client accessing a service but not to get authorization decisions about 3rd parties.

(empty)

P.E.Pu-pPucmS.9

Process Client must forward credentials to service Process: process Client forwards credentials from its clients, leaving access control decisions to back-end services Service. It cannot also use service Process under its own credentials, unless as an authorization service. Each client must either forward credentials or operate using its own credentials. The knowledge base does not support a mixed-mode arrangement.

Matching Pu-pPucmS

R-CuP

Construction Patterns (0)

Threat Patterns (1)

P.E.Pu-pPucmS.9