Network Security
API BOLA and IDOR: Authorization Testing Guide
API BOLA authorization testing verifies that every object read, update, and deletion enforces the caller, action, tenant, relationship, and resource policy.
Broken object-level authorization in APIs.
1 resource
API BOLA authorization testing verifies that every object read, update, and deletion enforces the caller, action, tenant, relationship, and resource policy.