load_path.py scripts across modules register paths like '/module/api/%' using SQL LIKE wildcard, but check_roles_path() only recognized '**' as wildcard suffix. This caused all %-terminated paths to be treated as exact matches, resulting in 403 for any sub-path. Now both '/module/api/%' and '/module/api/**' work as prefix wildcards.
rbac
Description
Languages
Python
88.5%
CSS
10.8%
Shell
0.7%