Review of Skynet’s CWE-862 article: what it gets right about authorization, where it falls short, and safer access control advice for developers.