Authorization
Default Rejection Principle
A principle stating that access must be denied unless it has been explicitly evaluated and allowed.
Definition
The Default Rejection Principle means that access is never accepted by default. If the target, identity, or requested path is unknown or not explicitly validated, the request should fail. This principle shifts architecture away from implicit acceptance and toward explicit, decision-based authorization.
The Ariovis perspective
Ariovis separates governed entitlements, authentication and runtime authorization. When a decision depends on the user, resource, action and context, it should be made at the moment of use.
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.