Update update_project.rb

[jordan-dr]

No description provided.

[dryrunsecurity]

This pull request introduces a potential authorization bypass vulnerability in the project update mutation, where changes to the authorization mechanism might allow unauthorized users to modify project details.

💭 Unconfirmed Findings (1)

Vulnerability	Authorization Bypass Potential
Description	In the file app/graphql/mutations/projects/update_project.rb, the removal of explicit authorize :update, Project could weaken authorization mechanisms, potentially creating access control vulnerabilities that might allow unauthorized project updates. The authorization approach was changed from class-level to method-level checks within the authorized_find! method.

---

All finding details can be found in the DryRun Security Dashboard.