Users who are not authenticated can currently navigate directly to certain issue management routes instead of being redirected to the login page. Although some API operations are protected, the frontend routes should also enforce the expected authentication boundary. Access control should be applied consistently so unauthenticated requests are redirected before protected issue data or actions become available.