Authorization Testing Skill: Prove the right identity can take the right action on the right resource

Authorization Testing field guide: validate roles, resource ownership, tenant boundaries, action scope, denial, and audit evidence.