HUMAN VERIFICATION REQUIRED ASVS 8.2.2 Object-level authorization prevents IDOR and BOLA

The application ensures that data-specific access is restricted to consumers with explicit permissions to specific data items to mitigate insecure direct object reference (IDOR) and broken object level authorization (BOLA).