Security

Mass Assignment

Mass assignment is an API weakness in which client input is bound directly to internal object properties, letting a user set or change values they should not control, such as a role, price or status.

Deep dive

Learn Article

What Is Field-Level Authorization in an API?

Field-level authorization checks each property an API user can read or change. Without it, record access can expose prices, owners and order state.

beginner 5 min read

Back to glossary