https://www.immuniweb.com/owasp/owasp-broken-access-control.html
Broken Access Control Practical Overview OWASP Top 10 Exploits and Solutions