Business:Concepts:Principle:Provide Access By Permission Rather Than Exclusion
<data principle #PRINC-xxxx>
Categories : Business, Information, Technology, Development
Title : Provide Access by Permission rather than Exclusion
Statement : Access to Confidential Attributes is Denied by Default unless authorized. Provide access to Non-Confidential Attributes wherever possible.
Rationale :
Resources : * https://www.securecoding.cert.org/confluence/display/seccode/Top+10+Secure+Coding+Practices
</data>