Open the context
Choose the project folder and name the files or behavior involved.
Workflows
Coding workflows · Authorization boundaries
03
A concrete starting point
Check whether a user may edit a particular record, not just whether they are signed in. Test another owner’s record and ensure forbidden fields cannot be changed through the same request.
Define the change
Describe the input, expected output and boundaries that must stay intact.
Inspect the work
Review the proposed edits and any commands before relying on their result.
Check the outcome
Compare actual behavior with the expected result. If a check fails, investigate it before applying more changes.
Authorization boundaries
A concrete starting point
const actor = await authenticate(request);
if (!canEdit(actor, document)) return forbidden();
return updateAllowedFields(document, input);The example is a starting point for a real project, not a claim that generated code is already tested. Adjust paths, dependencies and expected behavior to match your application.