// SECURE CODING · ORIGINAL TRAINING CHALLENGE

Logic Gate

Review a synthetic access check and identify its logic flaw.

Hard500 PTSOFFLINE EVIDENCE

// MISSION

Investigate the evidence

Review a synthetic access check and identify its logic flaw.

OBJECTIVE

Recover the marker and submit it using the format SG{marker}.

BOUNDARY

Self-contained synthetic artifacts only. No live targets, services, devices, or external systems.

// FLAG CHECK

$ specter open logic-gate
[+] evidence ready
[+] local practice mode

TRAINING FLAG

Progress stored in this browser.

// EVIDENCE

ARTIFACT

const canRead = user.isAdmin || resource.isPublic || user.id === resource.ownerId;\n// Buggy production code:\nif (user.isAdmin || resource.isPublic || resource.ownerId) allow();\nmarker=boolean_checks_matter

HINT 01

A non-empty owner ID is truthy, but it is not an ownership check.