Details
Description
Known missed spots at the moment:
- Script Jobs (this is also cross product), code editor is available even when the user has no permissions. The REST resource also does not validate permissions when creating/updating a job, which allows an unauthorised user to create jobs with code via REST.