So each API ought to have object-level authentication security that accesses the information using the input from the client.
API1:2019 Broken Object Level AuthorizationĪPIs tend to expose endpoints that handle object identifiers, creating a wide array of surface-level access control issues.
