
Hello team, I have found a authorization issues in your website. With this issue Low privileged user's like collaborator users can still access DEV environment even workplace owner unchecked dev access permission from owner account. With this issue collaborator user can unlimited access that dev environment functionality until workplace owner remove collaborator user from manage access area. Actually when workplace owner allow collaborator user to access to dev environment by check to dev then collaborator user get dev access , but after then if owner tries to uncheck dev environment to collaborator user then still collaborator user can use fully access of dev environment. Only if owner remove collaborator user from manage access tab then only access permission is denied. I think this is vulnerability that collaborator user can access dev environment even owner uncheck his access. Step to reproduce: 1. visit dashboard.doppler.com 2. Create 2 different accounts ( 1. owner and 2 collaborator to his workplace / ) 3. now create project and goto manage access tab from workplace owner account. 4. then goto manage access area and check allow dev environment to collaborator 5. Goto dev environment from collaborator and access dev environment 6. Now again uncheck dev environment to collaborator 7. now at this time collaborator should to get access denied to access dev environment but collaborator still fully accessing dev without any problem . 8. But for the fully access denied...
SOCIAL SHARE CARD GENERATOR