Django Admin Security Audit at 15Five

#+roam_tags: security audit 15five

Working with Piotr Siemieniak on auditing the parts of the Django admin that people should not have access to.

https://docs.google.com/document/d/141fZHt2rYIdYo4wMCAOBHy5cgqDxknzqN64tuBdCHQI/edit

Going to do my best to follow this: https://vulcan.io/blog/your-network-security-audit-checklist/

1. Define the scope of the audit

2. Determine the threats

3. Recommend courses of action