hard20 pts · first answer countsapi-testingapi-security

Same URL, different method

GET /admin/users/5 correctly returns 403 for a normal user. What extra test checks for method-based access bugs?

A.Send GET again with a much longer timeoutB.Send GET to /admin/users/6 as an adminC.Send OPTIONS and expect a 200 with a bodyD.Send DELETE and PUT to the same URL as a normal user

Discussion 0

Join free to post in the discussion.

Same URL, different method

Discussion 0

Related questions