HUMAN VERIFICATION REQUIRED ASVS 8.1.1 Authorization rules are documented

Authorization documentation defines rules for restricting function-level and data-specific access based on consumer permissions and resource attributes.