Permission abuse

Tests whether a workflow respects who should be allowed to do what.

Escalation tricks test role boundaries, claimed authority, and missing confirmation flows.

What it can reveal

• Weak permission boundaries
• Action escalation
• Unauthorized behavior attempts
• Missing confirmation flows

This checks a focused risk area. Keep testing as your product changes.