Skip to content

Commit 315b820

Browse files
committed
Fix typo: requestor -> requester
1 parent fcee1e5 commit 315b820

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/api-management/mitigate-owasp-api-threats.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ More information about this threat: [API1:2023 Broken Object Level Authorization
3838

3939
### Recommendations
4040

41-
* The best place to implement object level authorization is within the backend API itself. At the backend, the correct authorization decisions can be made at the request (or object) level, where applicable, using logic applicable to the domain and API. Consider scenarios where a given request may yield differing levels of detail in the response, depending on the requestor's permissions and authorization.
41+
* The best place to implement object level authorization is within the backend API itself. At the backend, the correct authorization decisions can be made at the request (or object) level, where applicable, using logic applicable to the domain and API. Consider scenarios where a given request may yield differing levels of detail in the response, depending on the requester's permissions and authorization.
4242

4343
* If a current vulnerable API can't be changed at the backend, then API Management could be used as a fallback. For example:
4444

0 commit comments

Comments
 (0)