Actions
Story #31
openEpic #29: Insecure Direct Object Reference (IDOR) Prevention
Validate Authorization for Object Access
Start date:
01/05/2026
Due date:
% Done:
0%
Estimated time:
Acceptance Criteria:
1. User cannot access other users’ records
2. Unauthorized access returns error
DOR:
No
Story Points:
Work Type:
Feature
User Impact:
Technical Area:
Release Narrative:
Planned Sprint:
Completed In Sprint:
Spillover Reason:
Deployment Reference URL:
Description
As a system, I want to ensure users can only access objects they are authorized to. Exposing direct references to database structures means allowing parts of your application, such as modules or classes, to directly interact with database tables, columns, or other structures.
Actions