Abstract
Abstract The number of web application users is growing every day along with the number of acts related to vulnerabilities. Moreover, most incidents occur within the framework of architectural shortcomings and incompleteness of security requirements. The integrity of user accounts should be a priority and is first laid down when designing a system architecture. This recent research touches upon the core of the problem, resource access control mechanisms. Most access control mechanisms are not competent to independently cover information security requirements. In addition, in this study, we compare five popular access control mechanisms and identify disadvantages and advantages within the Zero Trust Architecture. During the study, it turned out that the mechanisms alone do not cover the requirements, but among them, OPA shows the best result, overtaking peers in versatility, flexibility, and context. In summary, the results of the comparison insist on the use of hybrid access control mechanisms, since they are unique in their existence, each of them is sharpened for its own purposes.