The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or authorization credentials.
CWE-306