Testing for Insecure Direct Object References (OWASP-AZ-004)