Find gaps in who can see what

Proving that each user sees only their own data starts with writing down who may do what. If a role is missing or an action has two decisions, your tests have a gap you cannot see. This checker reads your access matrix and finds those problems.

Each row names an action, a role and whether it is allowed, for example whether an anonymous visitor, the owner, another user or an admin may read a project. The checker reports missing roles and duplicate decisions, and a complete matrix comes back valid. It runs locally from the command line with Python 3.10 or later, on Windows, macOS and Linux.

It checks the matrix, not your app. It cannot test a server, so each case still has to be run as a direct request against your real server operations; the Build and verify a private dashboard guide covers both steps. Provider accounts, model weights, GPU compute and hosting are not included, and related agent, model and hosting services may need a separate account.