Which test checks for broken access control?
QuizMediumAsked in: Accenture, TCS
Broken access control means users can see or do things that they should not be allowed to. You are logged in as customer A and your order page is /orders/1045. Which test checks for broken access control?
- Change the URL to /orders/1046, which belongs to customer B, and check that access is refused
- Enter a 500-character name in the profile form
- Check that the order page loads in under 2 seconds
- Check that the password field hides the typed characters
This question is part of Pro+
Pro+ opens every question in Interview Prep and the mock interview. Every article and the first 2 questions of each topic stay free. Hands-on Selenium and API tasks follow their course lesson's own lock.