Practical OWASP API Security Testing: Finding Broken Object Level Authorization (BOLA)

A practical approach to identifying object-level authorization weaknesses in modern APIs