Skip to content

The Hunt: nine simulated Base44 security leaks and a bonus

LEVEL 1 / 100/9

Core hunt 1–6 · Level-up pack 7–9 · ★ Bonus

Level 1

Table left open

The scenario

PetPals Bookings stores every booking in a table.

The owner thought only logged-in customers could see their own bookings — but the table's Read rule is set to “All Users”.

Guided hint · Beginner mode

Permissions are set per table. Open Dashboard → Data → your table → Permissions and read who can Read it. Compare that with who should be able to see a booking.

Skip to the checklist

Leak Hunt is a free, simulated security guide for Base44 builders. Everything here is fake.

Made by Dean Lynn · Sources and honesty note