1

I created a saas template where you have an option set of three user types; super admin, admin and user.

The Super admin cannot be created by workflow. The template owner needs to change a user status in the database to super admin.

My question is if a hacker is able to manipulate the auto binding of the user type dropdown field. I have filtered the super admin value out in this field. But is it possible that a hacker sees the Super Admin value and then somehow manage to send the super admin to the database?

2

This topic was automatically closed after 70 days. New replies are no longer allowed.