AI-Generated IDOR (Broken Object-Level Authorization) Review Rules
No required blockers for this preset.
caution
64/100
Collect package checksum or signed artifact information.
rules/ai-generated-idor-review-rules · trust review · confidence 83%
Browse the directory
/
Showing 1 resource for "broken-access-control"
Saved
/ search · [ ] view density · esc clear input
Active
Adoption queue
Browse adoption queue · balanced
0/1 visible results are ready for staged adoption under this preset.
ready 0caution 1hold 0
Decision confidence
Decision confidence scan · balanced
0/1 results are high-confidence for the selected preset.
high 0medium 1low 0
AI-Generated IDOR (Broken Object-Level Authorization) Review Rules
Address Package integrity before broader rollout.
medium
68/100
Missing: Package integrity
rules/ai-generated-idor-review-rules · trust review
rulesReview firstSource-backedReview firstClaude Code
Source-backed rules for reviewing AI-generated endpoints and data-access code before merge for insecure direct object reference risk, covering per-request object-level authorization checks, scoped database lookups, identifier exposure, and consistent enforcement across read, write, and admin operations.
Safety ✓ Privacy ✓