Spaces:
Sleeping
Sleeping
Dashboard for all teachers (own-data scoped) + fix report IDOR
#3
by kuanz - opened
Opens the dashboard to all teachers scoped to their own data (admins see all), with server-enforced ownership checks. Also fixes a pre-existing cross-teacher IDOR on GET /api/reports/{id}. Adversarially reviewed (1 blocker fixed, 0 refuted). No schema change.
🤖 Generated with Claude Code
Deploying per-teacher dashboard + report IDOR fix.
kuanz changed pull request status to merged
Ready for deploy.
kuanz changed pull request status to open