From Dev.to
Why testing broken access control is still mostly a manual job — and what it takes to automate it
Broken object-level authorization has held the top spot on the OWASP API Security Top 10 for years now. It's also the class that scanners are worst at, for reasons that have less to do with tooling qu...