Long post to say that yet another application had an access control issue which was being masked because the access control was implemented on the client. Incr

Long post to say that yet another application had an access control issue which was being masked because the access control was implemented on the client. Incredibly common in my experience in the security field.