Proves what an ordinary account can and cannot write to a PRO profile: the protected business values (boost dates, credit balance, referral counts, fulfillment receipts, payment version) are not writable directly, while the account's own profile details still save through the owner door.
Run this while signed in as a genuine non-admin account
An administrator can write every one of these fields legitimately, so an admin session cannot show what an ordinary account experiences. Sign in as (or invite) an account whose role is user, open this page and press Run. Nothing else in the app links here.
Configured — the profile record admits administrators only for create and update, and the subscription, credit-ledger, payment-operation and referral records do the same. Owners edit their own profile through a server-side door that allowlists the editable fields and refuses financial, reward, receipt, version and ownership fields.
Observed — every line this page reports is a live attempt made by the signed-in account, with an independent re-read afterwards, not a reading of the declared rule. A line marked "NOT RUN" is one the page could not exercise on this account.