---
title: "Discussion on \"Broken Access Control in Java and Spring: Secure Implementation Patterns (Part 2)\" | Hashnode"
description: "Discussion on \"Broken Access Control in Java and Spring: Secure Implementation Patterns (Part 2)\". Defend against vertical privilege escalation in Java and Spring Security 6. RBAC vs ABAC, mass assignment, and access control testing patterns."
url: "https://hashnode.com/posts/broken-access-control-in-java-and-spring-secure-implementation-patterns-part-2/6a3930a5c7b21ee603e4480e"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Broken Access Control in Java and Spring: Secure Implementation Patterns (Part 2)](https://securitydepth.hashnode.dev/broken-access-control-in-java-and-spring-secure-implementation-patterns-part-2?utm_source=hashnode&utm_medium=feed)

Defend against vertical privilege escalation in Java and Spring Security 6. RBAC vs ABAC, mass assignment, and access control testing patterns.

Jun 22 · 27 min read · securitydepth.hashnode.dev  
Read the article

-   [#java](https://hashnode.com/tag/java)
-   [#spring](https://hashnode.com/tag/spring)
-   [#spring-security](https://hashnode.com/tag/spring-security)
-   [#application-security](https://hashnode.com/tag/application-security)
-   [#owasp](https://hashnode.com/tag/owasp)
-   [#web-security](https://hashnode.com/tag/web-security)
-   [#authorization](https://hashnode.com/tag/authorization)

## Written by

[Milan Nikic](https://hashnode.com/@nick79)

@nick79 · Belgrade, Serbia

  
[View profile](https://hashnode.com/@nick79)

Secure coding patterns and security architecture insights

20+ years in software development, now focused on application security. Writing hands-on guides on secure coding patterns, vulnerability analysis, and security architecture.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.