Skip to content

fix(auth): prevent admin role self-assignment during registration#4296

Open
ca2987809794-ggg wants to merge 3 commits into
SecureBananaLabs:mainfrom
ca2987809794-ggg:main
Open

fix(auth): prevent admin role self-assignment during registration#4296
ca2987809794-ggg wants to merge 3 commits into
SecureBananaLabs:mainfrom
ca2987809794-ggg:main

Conversation

@ca2987809794-ggg

Copy link
Copy Markdown

Summary

  • restrict public registration roles to client and freelancer
  • preserve the default client role
  • add focused tests for allowed roles and rejected admin self-assignment
  • fix the API test script so Node runs the test files explicitly

Tests

  • npm test

Closes #4287
Refs #743

github-actions Bot added a commit that referenced this pull request Jun 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix(auth): prevent admin role self-assignment during registration

1 participant