Services / Permission tests
Every test sent again as the wrong user, so a pass means the check exists.

Runs, the verdict The proof: 269 of 304 BookStack tests refused to the wrong user
BookStack v26.05.5 · run of 26 Sep 2026, 17:42 UTC · commit 0f5164ec
What it is made of
Generated tests, with the wrong-user check
Tests written from the map that run, each re-sent as the wrong user.
Runs, with evidence
Every test: what was sent, what came back, why it failed, a picture.