CyberMindSpace Labs
Browser demonstration

Internal Admin API

Find cross-user record access. Enable the ownership check and verify the fix.

Synthetic dataRuns in your browser
WEB SECURITY / OBJECT AUTHORIZATIONBROWSER EXERCISE / SYNTHETIC DATA
AUTHENTICATED USER / ALICE

Who owns the record?

Read your record, then change the ID from 1042 to 1043. Enable the authorization check and repeat the same request.

The response and finding will appear here.

About Labs