Pull request reviewer
ProblemReviews either rubber-stamp a diff or drown it in style nits, and the real bugs get through.
diff: adds if (user.role = 'admin') to the permissions check
Verdict: request changes.
Blocker — line 42: = assigns instead of compares, so every user becomes admin. Use ===.
Test to add: a non-admin calling DELETE /users gets 403.
Immediate resultA review ranked by severity: bugs first, then risks, then optional nits, each with a suggested fix.


