KamoCRM

Add backend validation to block Everyone role modifications

FeatureSecurityService
Shipped
16 அக்டோபர், 2025 அன்று 2:18 AM UTC
Author
snadjafinia
Commit
e94913d

- Added protection check in updateRole endpoint - Added protection check in deleteRole endpoint - Returns 403 Forbidden when attempting to modify protected roles - Checks isAllowDelete field before allowing operations - Clear error messages in response - Logs all attempted violations for security monitoring - Prevents any backdoor modification of Everyone role

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing