Project
Test another owner’s record and ensure forbidden fields cannot be changed through the same request.
AI coding workspace
Authorization boundaries
A signed-in user should still have a clear boundary. CodeArmory brings permission checks and the files around them into one workspace for a focused code review.
● ● ●CodeArmory●
A concrete starting point · Authorization boundaries ×
const actor = await authenticate(request);
if (!canEdit(actor, document)) return forbidden();
return updateAllowedFields(document, input);✳Check whether a user may edit a particular record, not just whether they are signed in.
✓ ChangesReview before applying ↗
Illustrative workspace
Review before applying
Compare actual behavior with the expected result. If a check fails, investigate it before applying more changes.
Connection
Base URL, credentials and a reachable server.
A concrete starting point
const actor = await authenticate(request);
if (!canEdit(actor, document)) return forbidden();
return updateAllowedFields(document, input);