Code reviewHardcr-g036

Subject Missing authorizationLevel Senior–Staff~30 minCommon in Security interviewsIndustries Software development

Question

Review this Python (FastAPI + SQLAlchemy) profile-update endpoint.

What a strong answer looks like

Separate real bugs from style. Rank issues by severity, point at the root cause rather than the symptom, and suggest a concrete fix — specific and kind.

Learn the concepts

Talk through your review

Code to reviewpython

1@router.patch('/me')2def update_me(updates: dict, db: Session = Depends(get_db),3              user: User = Depends(current_user)):4    for field, value in updates.items():5        setattr(user, field, value)6    db.add(user)7    db.commit()8    return {'ok': True}

Run or narrate your approach, then ask the coach.