/duplicates admin page has no authorization or role check #18

New issue

Copy link

New issue

Copy link

Open

Open

/duplicates admin page has no authorization or role check#18

Copy link

Labels

bugSomething isn't workingSomething isn't workingpriority:highMust fix soonMust fix soonsquad:natasha-romanoffAssigned to Natasha Romanoff (Security & Auth)Assigned to Natasha Romanoff (Security & Auth)

Description

EngstromJimmy

opened on Mar 5, 2026

Issue body actions

Pages/Duplicates.razor has no [Authorize] attribute or role guard. Any anonymous visitor can trigger the destructive deletion logic. Should be restricted to admins only.

Activity

1. EngstromJimmy

   added

   bugSomething isn't workingSomething isn't working

   squad:natasha-romanoffAssigned to Natasha Romanoff (Security & Auth)Assigned to Natasha Romanoff (Security & Auth)

   priority:highMust fix soonMust fix soon

   on Mar 5, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

Labels

bugSomething isn't workingSomething isn't workingpriority:highMust fix soonMust fix soonsquad:natasha-romanoffAssigned to Natasha Romanoff (Security & Auth)Assigned to Natasha Romanoff (Security & Auth)

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

• Open in GitHub Copilot app