Urgent.News

What's breaking now, across thousands of outlets.

Tech

Project access is not object permission

Having access to a project, workspace, or tenant does not mean every nested action is allowed. Read on the folder is not delete on every child. Member of the org is not admin on every resource inside it. Authorize each request as subject + action + resource — including nested objects — instead of stopping at “they can see the parent.”

We haven't written up this one. Dev.to has the full story — the link below goes straight to it.

Read the original at dev.to →

More in Tech

Our watchdog restarted a healthy agent 24 times a day for months, and its own log said everything was fine

Disclosure first: I work on macyou.co, which rents Apple Silicon machines, so I have a stake in where people run things. Everything below is from our own install and from a harness anyone can run…

  • Watchdog restarted healthy agent 24 times daily for months
  • Health check mechanism incorrectly identified hung processes
  • Suggested solution: agent writes heartbeat file to indicate success

More from Thursday 24 September →