Enforce authorization checks on all existing endpoints - Githubissues

sandboxnu / seitz

1 stars 0 forks source link

Enforce authorization checks on all existing endpoints #76

Closed ross3102 closed 7 months ago

ross3102 commented 8 months ago

For every existing endpoint, make sure authorization is checked properly

For actions that require authentication, use the appropriate middleware (401 Unauthorized)
Same for admins (403 Forbidden)
For actions that can only be performed by specific users, check and return 403 Forbidden
- Users can't view or edit other users' data

It may be the case that everything's fine already, in which case this ticket is a no-op :)