Case 282 Registration Role Boundary

  • Lab fixture: intentionally exposes non-admin role choices so the audit can verify server-side allow-listing and tamper resistance.
  • Name

Fixture notes: registration form includes Case 282 Requested Role with subscriber/contributor/case282 roles only. Audit should tamper custom_field_user_role/wppb_user_role/wppb_form_id, including administrator, without broadening scope.