Cross-Tenant Project Leak
SecureLearn also serves organizations. Alice belongs to ACME and should only see ACME projects and files. The application looks up projects and documents globally by ID. Test whether tenant ownership is enforced across related resources.
Objective
Access another organization's project, follow the leaked document reference, and recover the protected flag.