Broken Object Level Authorization (BOLA) | Security Notes