Authorization - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Auth By Example

Oct 14

A profile update endpoint can let users change fields they were never allowed to edit

#authorization #security #backend #api

2 min read

Auth By Example

Oct 14

A new group with an old group's name can inherit everything the old one could access

#authorization #security #backend #saas

1 min read

Auth By Example

Oct 14

An approve button needs to check that the approver didn't file the request

#authorization #security #backend #webdev

1 min read

Auth By Example

Oct 14

What to log when an AI agent acts on someone's behalf

#ai #security #authorization #mcp

2 min read

Oct 13

API Auth Bugs Are Usually State Bugs

#security #api #authorization #webdev

7 min read

Auth By Example

Oct 13

When an invoice approval check outgrows if user.role == "admin"

#authorization #security #architecture #webdev

2 min read

Auth By Example

Oct 13

A CSV import that matches on ID can overwrite records the importer can't edit

#authorization #security #backend #saas

2 min read

Auth By Example

Oct 13

Sorting by a hidden column can leak the values you hid

#authorization #security #backend #saas

1 min read

Auth By Example

Oct 13

Renaming a shared tag can edit records the user can't open

#authorization #security #backend #saas

1 min read

Auth By Example

Oct 12

Reply-by-email can post comments after the sender loses access

#webdev #authorization #security #backend

1 min read

Auth By Example

Oct 12

Search autocomplete can name records the list page already hid

#saas #authorization #backend #security

1 min read

Auth By Example

Oct 12

An open editor tab can keep autosaving after you remove edit access

#authorization #security #backend #webdev

1 min read

Auth By Example

Oct 11

Your related items panel can name records the viewer can't open

#authorization #security #backend #saas

1 min read

Auth By Example

Oct 11

Your command palette can list records the search page would hide

#authorization #security #backend #saas

1 min read

Auth By Example

Oct 11

Print preview can still show records the user lost access to

#authorization #security #backend #saas

1 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.