Ella-Bakshi

Certain endpoints fail to enforce role-based authorization checks. This allows authenticated users to request these endpoints to read financial data that exceeds the permissions granted by their assigned role.