https://www.immuniweb.com/blog/OWASP-broken-access-control.html
Broken Access Control Practical Overview OWASP Top 10 Exploits and Solutions