# featkpr maps your web app and tests its permissions as the wrong user.

It reads the code, opens every screen and writes the tests itself. Here it is on BookStack, an open-source wiki we don't own.

## BookStack, step by step

BookStack v26.05.5, commit 0f5164ec: features read 27 Sep 2026, crawl 25 Sep 2026, last run 26 Sep 2026, 17:42 UTC.

| Stage | Count |
|---|---|
| code read | 343 routes |
| features named | 307 features |
| screens crawled | 167 screens |
| paths drafted | 163 paths |
| tests run | 304 pass |
| wrong-user check | 269 refused to the wrong user |

605 things featkpr missed, listed in the report: https://featkpr.com/library/bookstack/reports/2026-09-26-v26-05-5.md

## Each test runs twice

Once with permission, where it must pass, and once without, where the app must refuse it. 269 of 304 BookStack
tests are refused to the wrong user; 35 are unchecked: no user without that permission exists to try them as yet.

## More

- Library (https://featkpr.com/library.md): 25 products, one through all six steps.
- Services (https://featkpr.com/services.md): what featkpr does for your app today.
- Blog (https://featkpr.com/blog.md): findings from real products.
- Roadmap (https://featkpr.com/roadmap.md): Week 0 · from 28 Sep is now.
- Private demo (https://featkpr.com/demo.md): a live walkthrough first, then read-only access once invites exist.

Figures: BookStack, copied from featkpr's own records on 27 Sep 2026.

---

The page this twin stands for: https://featkpr.com/. Every page on this site has a `.md` twin, and answers `Accept: text/markdown`.