https://jetamooz.com/direct-object-references-in-security-testing/