Code execution as another user

Hi folks,

Could I please talk privately with someone in the team about something found during a pen test and what could potentially be done to mitigate against it?

Thanks very much.