fix/IDOR vulnerability#63

Open

atharv02-git wants to merge 8 commits into

thoth-tech:app-attack-fixesfrom

atharv02-git:fix/IDOR-Vulnerability

Commits on May 6, 2025

Imported role_helpers to implement Role Based Access Controls
atharv02-git
committed
Reusing centralized role-checking logic by importing role_helpers module to implement RBAC on email, firstname, lastmame, username
atharv02-git
committed
Add role-based checks in UnitRoleEntity to prevent students from accessing full staff details
atharv02-git
committed
Add my_role context to UnitRole serializer to enforce RBAC during API response serialization.
atharv02-git
committed
Add user: current_user to unit serializer to enable role-based filtering in UnitEntity for RBAC enforcement.
atharv02-git
committed
Added role_helpers module to centralize and reuse RBAC logic across different api entities
atharv02-git
committed

Commits on May 8, 2025