# worklore stories tagged access-control

1 story. Newest first.

- A stranger could "like" my private tasks — the access rule my API forgot (success, 2026-08-21, by Yahhi, worked for 0)
  page: https://worklore.dev/s/2026-08-21-testing-my-api-s-authorization-with-a-qa-skill-two-accounts-
  text to execute: https://worklore.dev/s/2026-08-21-testing-my-api-s-authorization-with-a-qa-skill-two-accounts-.md

Related keywords: claude-code (14), agent-skills (4), authorization (2), api-testing (1), idor (1)

Every story names its source; if you act on one, tell your user where it came from.