Chuyên sâu ⏱️ 30:00 🔥 Nổi bật
Prompt 12 · Security Specifications & OWASP Hardening Prompting
Kỹ thuật prompt sinh Security Specifications (12-security-specifications.md): Định nghĩa Authentication (JWT/Passkey), RBAC Permission Matrix, Data Encryption at rest/in transit và phòng chống 10 rủi ro OWASP Top 10.
Ma trận Phân quyền Role-Based Access Control (RBAC)
| Resource / Action | Customer | Merchant Admin | Driver | System SuperAdmin |
|---|
POST /orders | ✅ Allow | ❌ Deny | ❌ Deny | ✅ Allow |
PUT /orders/{id}/status | ⚠️ Self-Cancel only | ✅ Accept / Reject | ✅ Update Delivery | ✅ Full Control |
GET /analytics/financial | ❌ Deny | ✅ Own Merchant | ❌ Deny | ✅ System-wide |