CVE-2026-55551 ZAC: Missing per-zaaktype authorization on by-ID decision and process reads

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt omit assertPolicypolicyService.readZaakRechtenzaak.lezen authorization. RequestAuthorizationFilter and...