SkillBossDemo

Who’s asking?A hidden button is not an auth check. Three routes — you decide what’s protected.

Question 01 / 03DEMO

Your app only shows the Delete button to a project’s owner, but DELETE /api/projects/:id has no auth check. Safe?

40s
40 seconds remaining.