hard20 pts · first answer countsauthenticationaccess-controlcaching
Removed admin can still delete users
Permissions are cached in each API instance for 1 hour. An admin is demoted, but can still delete users for the next hour. What is a good fix?
Discussion 0
Join free to post in the discussion.
Related questions
- How to store passwordsBackend Developer
- Redis TTL after SET with EXBackend Developer
- What HttpOnly does on a cookieBackend Developer
- Authentication versus authorizationBackend Developer
- What a password salt is forBackend Developer
- Is HTTP Basic auth encryptedBackend Developer
- Sending an access token to an APIBackend Developer
- What the Secure cookie flag doesBackend Developer