Web App Security: Breaking Access Control

I started learning web app hacking yesterday, focused entirely on one OWASP Top 10 category: Broken Access Control. By the end of the day I'd solved three PortSwigger Web Security Academy labs, and ev