Environment: Production

Two protections were added to the admin app.

• Actions that change data must originate from the admin app itself. A create, update, or delete triggered from another site while you are signed in is now rejected before it reaches your data. Scheduled data feeds from Tapestry systems are unaffected.
• Only super admins can change the spend limits that bound how much the assistant and connected services can consume. Any admin can still view them.