{"@ID": "1011", "@Name": "Authorize Actors", "@Status": "Draft", "Summary": "Weaknesses in this category are related to the design and architecture of a system's authorization components. Frequently these deal with enforcing that agents have the required permissions before performing certain operations, such as modifying data. The weaknesses in this category could lead to a degradation of quality of the authorization capability if they are not addressed when designing or implementing a secure architecture.", "Relationships": {"Has_Member": [{"@CWE_ID": "114", "@View_ID": "1008"}, {"@CWE_ID": "15", "@View_ID": "1008"}, {"@CWE_ID": "219", "@View_ID": "1008"}, {"@CWE_ID": "220", "@View_ID": "1008"}, {"@CWE_ID": "266", "@View_ID": "1008"}, {"@CWE_ID": "267", "@View_ID": "1008"}, {"@CWE_ID": "268", "@View_ID": "1008"}, {"@CWE_ID": "269", "@View_ID": "1008"}, {"@CWE_ID": "270", "@View_ID": "1008"}, {"@CWE_ID": "271", "@View_ID": "1008"}, {"@CWE_ID": "272", "@View_ID": "1008"}, {"@CWE_ID": "273", "@View_ID": "1008"}, {"@CWE_ID": "274", "@View_ID": "1008"}, {"@CWE_ID": "276", "@View_ID": "1008"}, {"@CWE_ID": "277", "@View_ID": "1008"}, {"@CWE_ID": "279", "@View_ID": "1008"}, {"@CWE_ID": "280", "@View_ID": "1008"}, {"@CWE_ID": "281", "@View_ID": "1008"}, {"@CWE_ID": "282", "@View_ID": "1008"}, {"@CWE_ID": "283", "@View_ID": "1008"}, {"@CWE_ID": "284", "@View_ID": "1008"}, {"@CWE_ID": "285", "@View_ID": "1008"}, {"@CWE_ID": "286", "@View_ID": "1008"}, {"@CWE_ID": "300", "@View_ID": "1008"}, {"@CWE_ID": "341", "@View_ID": "1008"}, {"@CWE_ID": "359", "@View_ID": "1008"}, {"@CWE_ID": "403", "@View_ID": "1008"}, {"@CWE_ID": "419", "@View_ID": "1008"}, {"@CWE_ID": "420", "@View_ID": "1008"}, {"@CWE_ID": "425", "@View_ID": "1008"}, {"@CWE_ID": "426", "@View_ID": "1008"}, {"@CWE_ID": "434", "@View_ID": "1008"}, {"@CWE_ID": "527", "@View_ID": "1008"}, {"@CWE_ID": "528", "@View_ID": "1008"}, {"@CWE_ID": "529", "@View_ID": "1008"}, {"@CWE_ID": "530", "@View_ID": "1008"}, {"@CWE_ID": "538", "@View_ID": "1008"}, {"@CWE_ID": "551", "@View_ID": "1008"}, {"@CWE_ID": "552", "@View_ID": "1008"}, {"@CWE_ID": "566", "@View_ID": "1008"}, {"@CWE_ID": "639", "@View_ID": "1008"}, {"@CWE_ID": "642", "@View_ID": "1008"}, {"@CWE_ID": "647", "@View_ID": "1008"}, {"@CWE_ID": "653", "@View_ID": "1008"}, {"@CWE_ID": "656", "@View_ID": "1008"}, {"@CWE_ID": "668", "@View_ID": "1008"}, {"@CWE_ID": "669", "@View_ID": "1008"}, {"@CWE_ID": "671", "@View_ID": "1008"}, {"@CWE_ID": "673", "@View_ID": "1008"}, {"@CWE_ID": "708", "@View_ID": "1008"}, {"@CWE_ID": "732", "@View_ID": "1008"}, {"@CWE_ID": "770", "@View_ID": "1008"}, {"@CWE_ID": "782", "@View_ID": "1008"}, {"@CWE_ID": "827", "@View_ID": "1008"}, {"@CWE_ID": "862", "@View_ID": "1008"}, {"@CWE_ID": "863", "@View_ID": "1008"}, {"@CWE_ID": "921", "@View_ID": "1008"}, {"@CWE_ID": "923", "@View_ID": "1008"}, {"@CWE_ID": "939", "@View_ID": "1008"}, {"@CWE_ID": "942", "@View_ID": "1008"}]}, "References": {"Reference": [{"@External_Reference_ID": "REF-9"}, {"@External_Reference_ID": "REF-10", "@Section": "pages 69 - 78"}]}, "Mapping_Notes": {"Usage": "Prohibited", "Rationale": "This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.", "Comments": "See member weaknesses of this category.", "Reasons": {"Reason": {"@Type": "Grouping"}}}, "Content_History": {"Submission": {"Submission_Name": "Joanna C.S. Santos, Mehdi Mirakhorli", "Submission_Date": "2017-06-22", "Submission_Version": "2.12", "Submission_ReleaseDate": "2017-11-08", "Submission_Comment": "Provided the catalog, Common Architectural Weakness Enumeration (CAWE), and research papers for this view."}, "Modification": [{"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2020-02-24", "Modification_Version": "4.0", "Modification_ReleaseDate": "2020-02-24", "Modification_Comment": "updated Description"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-04-27", "Modification_Version": "4.11", "Modification_ReleaseDate": "2023-04-27", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-06-29", "Modification_Version": "4.12", "Modification_ReleaseDate": "2023-06-29", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2026-10-28", "Modification_Version": "5.0", "Modification_ReleaseDate": "2026-10-28", "Modification_Comment": "updated Mapping_Notes, References, Type"}]}, "entry_type": "Grouping"}