Project

General

Profile

Actions
Copy link

Epic #29

open

Insecure Direct Object Reference (IDOR) Prevention

Added by rashmita rout about 2 months ago. Updated about 2 months ago.

Status:
New
Priority:
High
Assignee:
Tingg BE
Target version:
-
Start date:
01/05/2026
Due date:
% Done:

0%

Estimated time:
(Total: 0:00 h)
Work Type:
Platform
Technical Area:
Release Narrative:

Description

Objectives:-
Prevent unauthorized access to internal objects by enforcing authorization and eliminating direct object exposure.

Covers:-
1. URL parameter tampering

2. Object-level authorization

3. Enumeration prevention

Subtasks 2 (2 open — 0 closed)

Story #30: Remove Primary Keys from URLsNewTingg BE01/05/2026

Actions
Story #31: Validate Authorization for Object AccessNewTingg BE01/05/2026

Actions
Actions
Copy link
 #1

Updated by rashmita rout about 2 months ago

  • Subtask #30 added
Actions
Copy link
 #2

Updated by rashmita rout about 2 months ago

  • Subtask #31 added
Actions
Copy link
 #3

Updated by rashmita rout about 2 months ago

  • Assignee set to Tingg BE
Actions
Copy link

Also available in: Atom PDF