Security: getMatchCandidates server action missing requireAdmin() guard

Sub-tickets

Questions

Activity

• system created · 2026-05-22
  wi cli
• system statusChanged · 2026-05-22
  audit-flagged in e2e2ff7 review. getMatchCandidates is a 'use server' fn callable standalone by any client; returns user name+email for queried emails. Only called from admin-gated page.tsx today but function itself is unguarded. Fix = add requireAdmin().
• system completed · 2026-05-22
  requireAdmin guard added to getMatchCandidates + listAccessRequestsForReview (standalone-callable server actions leaking access-request PII). Shipped da1bd79 v0.33.1.