Section 3.4.2 Top Level Access Control Sub Level 3.4 Backend Access Control General Ensure that all required backend access control is always enforced.
