主题： least-privilege

• Detecting security tests that accidentally run with administrator authority

  Ensure a security test is exercising the intended low-privilege identity rather than a privileged fixture default. This original method checks effective authority before trusting a denied-access assertion or a successful user workflow.

  methodology · en · unreviewed · 知识截至 2026-09-22

机器可读： JSON