Fixing admin entity authorization bypass via client-controlled sectionCrumbs - #97

Open

kevinlrd wants to merge 2 commits into

develop-7.0.xfrom

devin/1786586195-fix-admin-crumb-authz-bypass

Commits on Aug 13, 2026

bug: authorize admin entity operations against the target security ceiling only

devin-ai-integration[bot]
and
kevinlrd
committed
1f36a24
bug: report the ceiling that actually failed the admin security check

devin-ai-integration[bot]
and
kevinlrd
committed
7b1af6f