Access control case study

A standard account could become an administrator

An anonymized access-control case study by Somtochukwu Okoma covering broken authorization, privilege escalation and platform-wide data exposure.