05eb0a61_P_Top_Ten_Cheat_Sheet____OWASP__1
[0] A4 Insecure Direct Object Reference [2] Obtain data from internal, trusted sources Or Obtain direct value from random access reference access map [3] Validate role is sufficient to create, read, update, or delete data [1] 
If data is from internal trusted sources, no data is sent Or Render Send indirect random access reference map value
Difference between revisions of "OWASP Top Ten Cheat Sheet" - OWASP