Broken Function Level Authorization is the authorization issue that allows a regular user to execute privileged actions.

Access control is known to be something hard to implement and manage, so you can think about much more complex scenarios where checking if the requester is allowed to perform a specific action fails
https://t.co/NFgK2EGidY