Authorization at the Object Level: Testing for BOLA Before Someone Else Does Broken object level authorization is consistently at the top of the OWASP API Security Top 10, and it is consistently missed by automated scanners. The reason is that it is not a code defect in the usual sense. The end...
Source: [Dev.to](https://dev.to/bianliang/authorization-at-the-object-level-testing-for-bola-before-someone-else-does-487e)