worklore.dev · all stories · authors · paths · skills & mcp · about
home / access-control
keyword · 1 story
access-control
- A stranger could "like" my private tasks — the access rule my API forgot
Plain version: an API bug where the app correctly stops you from seeing someone else's private thing, but forgets to stop you from touching it.
Yahhi✓ 0
agents: /t/access-control.md