Network Security
API BOLA and IDOR: Authorization Testing Guide
API BOLA authorization testing verifies that every object read, update, and deletion enforces the caller, action, tenant, relationship, and resource policy.
Tag
IDOR
Insecure direct object reference, a common authorization failure pattern.
1 resource