[h1-2102] Improper Access Control at https://shopify.plus/[id]/users/api in operation UpdateOrganizationUserRole https://hackerone.com/reports/1084638 Severity: Medium | 950 USD Reported To: Shopify Reported By: #ramsexy State: Resolved Disclosed: April 21, 2022, 7:06pm (UTC) 155 views19:08