https://shipreadyai.dev/learn/verify/cross-user-access

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# One account reading another account's data

Whether a signed in account can reach another account's records by changing an id. ShipReady does not create accounts, sign in, or call your functions, so this cannot be answered from outside.

## Why a check from outside cannot see it

Answering this means creating two accounts on your app and using one to reach the other's data. That is an action on your product taken by a stranger, and no automated check on a public address should be doing it.

## How to check it yourself

1. Create two accounts and sign in to each in a different browser.
2. Copy a record address from the first account and open it in the second.
3. Repeat through the API rather than the interface, because the interface often hides what the API allows.

## What a Launch Review does instead

A reviewer signs in with two accounts, tries to reach one account's records from the other, and records exactly what answered.