Broken object level authorisation, usually shortened to BOLA, is one of the most common API security issues because it sits in the gap between application logic and access control. In simple terms, ...