Skip to content

Update "How To Impersonate Other Users" page#854

Merged
kodiakhq[bot] merged 2 commits intoblitz-js:mainfrom
cherniavskii:patch-1
Sep 29, 2024
Merged

Update "How To Impersonate Other Users" page#854
kodiakhq[bot] merged 2 commits intoblitz-js:mainfrom
cherniavskii:patch-1

Conversation

@cherniavskii
Copy link
Contributor

Hey there 👋

It seems to me that following this guide may lead to a data breach, as any authenticated user could impersonate other users.
I have updated the impersonateUser mutation snippet to now require the admin role.

@vercel
Copy link

vercel bot commented Jan 6, 2024

@cherniavskii is attempting to deploy a commit to the Blitz Team on Vercel.

A member of the Team first needs to authorize it.

Copy link
Contributor

@Kosai106 Kosai106 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice catch!

@cherniavskii
Copy link
Contributor Author

Hey @flybayer
Can you look at this one?

@blitzjs-bot
Copy link

Added @cherniavskii contributions for doc

@cherniavskii cherniavskii deleted the patch-1 branch September 30, 2024 17:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: In Review

Development

Successfully merging this pull request may close these issues.

4 participants

Comments