Mass Assignment
Easy · Mass assignment

Profile Update, Extra Role

TeamBoard's account page submits an ordinary JSON profile update. The API response model includes a role property that the UI never lets users edit.

Objective

Intercept or reproduce the profile update request and add the server-controlled role property so the returned account becomes admin.

Target

TeamBoard

Launch target

Submit flag