Broken Object Level Authorization in REST APIs
Most APIs skip the ownership check that prevents users from accessing each other's data.
Selin Nakamura
Section
1 story in Authorization.
Most APIs skip the ownership check that prevents users from accessing each other's data.