Django Access Control & IDOR Review

This specialized skill empowers Claude to perform thorough security audits of Django applications by tracing data flows and investigating how authorization is enforced. Instead of simple pattern matching, it analyzes the specific implementation of decorators, middleware, and ORM query scoping to determine if unauthorized users can access, modify, or delete sensitive data. It provides high-confidence reports on broken access control and suggests functional, code-level fixes to ensure robust tenant isolation and permission management within Django views and REST Framework viewsets.

主要功能

使用场景