/blog/how-to-prevent-broken-access-control/
https://binaryte.com/blog/post/how-to-prevent-broken-access-control/