fix: remove client-side role checks to prevent privilege escalation #9

Closed

wicky-zipstack wants to merge 2 commits intomainfrom

fix/remove-client-role-checks

Commits on Mar 26, 2026

fix: remove client-side role checks to prevent privilege escalation via session interception
wicky-zipstack
committed
fix: remove visitran_super_admin shortcut in checkPermission — root cause of privilege escalation
wicky-zipstack
committed