1. Documentation
2. The ZAP Desktop User Guide
3. Add-ons
4. Access Control Testing
5. Access Control Status Tab

Access Control Status Tab

The Access Control Status Tab allows starting of new Access Control testing and displays the results obtained. For each User and for each URL attacked by ZAP, an entry is added with information about:

• ZAP’s id of the message sent
• the HTTP method used
• the URL of the resource
• the HTTP status code of the response
• the User from whose point the resource was accessed
• whether the request was identified as being authorized or not
• the access rule used, which was either directly defined or inferred based on parent’s defined rules
• the result obtained: successful (green check) if the access rule was followed of failed (red cross) otherwise

See also