...
http://owasp-esapi-java.googlecode.com/svn/trunk_doc/latest/org/owasp/esapi/AccessController.html
Learn More:
...
...
...
- ESAPI Access Control API (See isAuthorizedForData(), isAuthorizedForFile(), isAuthorizedForFunction())
...
...
- CWE Entry 22 on Path Traversal (an example of a Direct Object Reference attack)