{
"id": "fastapi-role-check-after-resource-access",
"language": "python",
"group": "maintainability",
"listingTitle": "Review role check after resource access",
"title": "Review role check after resource access",
"mvvm": false,
"defaultSeverity": "info",
"legacyGroup": "maintainability",
"why": "Authorization performed after data access can expose resource existence or perform work before denial.",
"suggestion": "Use the explicit FastAPI contract or boundary appropriate to this finding.",
"version": 1,
"semanticMaturity": "project",
"securityKind": "none",
"taxonomy": [
"maintainability"
],
"requirements": [
"sourceText"
],
"packs": [
"fastapi"
],
"implementation": "src/rules/frameworks/fastapi.rs",
"languages": [
"python"
],
"frameworks": [
"fastapi"
],
"languageVersions": [],
"limitations": [
"Only explicit FastAPI decorators, common middleware, SQLAlchemy, JWT, and dependency patterns are resolved.",
"Framework wrappers, generated routes, runtime registrations, and external infrastructure cannot be resolved."
]
}