Unauthorized Access to Admin Panel

Closed 😎Fri Feb 09 2024

Description

Some users are able to access the admin panel of the application even though they don't have the necessary permissions. We need to investigate this security vulnerability and implement proper access controls to restrict unauthorized access.

Steps to Reproduce

  1. Log in to the application with regular user credentials.
  2. Attempt to access the admin panel by navigating to the designated URL.

Expected Behavior

Regular users should not have access to the admin panel. Access should be restricted to users with appropriate administrative privileges.