Anonymous user access restricted
Check ID
APP_0007
Category
Security
Summary
Anonymous users should not be allowed to create persistent objects (= data stored in the database). If anonymous users are not restricted from creating data, it is possible for a hacker to overload your database and app by creating an unlimited number of objects.
Options
This check does not have any options.
Pass
The access rules in your app restrict anonymous users to only creating non-persistent objects.
Fail
The access rules in your app enable anonymous users to create persistent objects.
Last updated