A course portal shows a “Change Grade” button only to instru…
A course portal shows a “Change Grade” button only to instructors. The frontend runs: if (currentUser.role !== “instructor”) { document.getElementById(“changeGradeBtn”).style.display = “none”;} Clicking the button sends POST /api/grades/update. The server updates the grade for any logged-in user who calls that endpoint. A student opens DevTools, sets the button’s display back to “block” and changes their own grade. Which statement best identifies the root cause?
Read Details