Connection
Base URL, credentials and a reachable server.
Product
Product features · Authorization boundaries
01
Check whether a user may edit a particular record, not just whether they are signed in. Test another owner’s record and ensure forbidden fields cannot be changed through the same request.
Selection
A model available through the configured endpoint.
Capabilities
Context limits and tool support are determined by the model and server.
Authorization boundaries
● ● ●CodeArmory●
A concrete starting point · Authorization boundaries ×
const actor = await authenticate(request);
if (!canEdit(actor, document)) return forbidden();
return updateAllowedFields(document, input);✳Check whether a user may edit a particular record, not just whether they are signed in.
✓ ChangesReview before applying ↗
Illustrative workspace