CT-SEC: Certified Tester Security Tester

Authorization testing verifies that users can access only the functions permitted by their assigned roles. Confirming that a non-admin user cannot access an administrator-only user-editing endpoint tests enforcement of role-based authorization and prevents vertical privilege escalation.