https://justice-reaper.github.io/posts/Access-Control-Lab-3/
User role controlled by request parameter - Justice-Reaper