CVE-2022-43138: Dolibarr vulnerable to privilege escalation

The vulnerability stems from missing authorization checks in multiple API user management methods. The GitHub patch adds critical permission validations (lire/creer rights checks) and field restrictions in:

1. put() - Added admin status/entity validation and permission checks
2. getInfo() - Added lire permission requirement
3. post() - Enforced creer permission These functions previously had commented-out or missing checks, allowing attackers to manipulate user accounts through the API without proper authorization. The exploit demonstrates how modifying admin email via put() could lead to account takeover.