### Key Check Items

- **Unauthorized access**: Check for unauthorized access defects where **data owner identity verification is missing** before performing data operations (update, delete, detail query) based on a passed-in ID (e.g., missing a check like `if data.owner_id != current_session.user_id:`, or missing an `AND user_id = ?` condition in SQL statements).
