Shanni Prutchi

4.3.1 and 4.3.3

16

Addressing #1352 Q7: > Q7 - 4.3.1, 4.3.3 - are those actually authentication requirements? While 4.3.1 is relevant to access control - as access to the admin interface can enable...

4.3.5 - Coverage by access control policies and deny by default otherwise

16

Note: This is referenced as 4.3.7 in #2033 but has updated numbering This requirement addresses two parts: there should not be any objects that don't have their access undefined, but...

4.1.7 - Real time access control decision making

17

Note: this is referenced as 4.1.10 in #2033, but I updating the numbering to account for the skipped requirements. I propose the addition of a new requirement that addresses the...