{"version":"1.0","provider_name":"The S-Unit","provider_url":"https:\/\/the-s-unit.nl\/en\/","title":"TSU-01: Insecure user roles - The S-Unit","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"qWJ64DQJJp\"><a href=\"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/tsu-01\/\">TSU-01: Insecure user roles<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/the-s-unit.nl\/en\/mendix\/the-s-unit-top-10\/tsu-01\/embed\/#?secret=qWJ64DQJJp\" width=\"600\" height=\"338\" title=\"&#8220;TSU-01: Insecure user roles&#8221; &#8212; The S-Unit\" data-secret=\"qWJ64DQJJp\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/the-s-unit.nl\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","description":"TSU-01: Insecure user roles TSU-01 highlights the risks that arise when permissions in Mendix are set too broadly. When users are granted excessive rights, they may gain access to functions or data not intended for them, which can potentially lead to data leaks. A secure configuration starts with limiting permissions to what is strictly necessary, [&hellip;]","thumbnail_url":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2026\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-300x300-1.png"}