Description
Taea did some incredible work tightening the access controls and the decrypted entry validations for channels in #3323 but a similar issue exists for user profiles. We should do similar updates to the user profile store.
Acceptance Criteria
- Validate ownership of user profile entry when modifying/deleting
- Add strict signature checks to user profile DB operations
- Check for any other gaps
Description
Taea did some incredible work tightening the access controls and the decrypted entry validations for channels in #3323 but a similar issue exists for user profiles. We should do similar updates to the user profile store.
Acceptance Criteria