HakkabakaA small blog in big cyber space.https://hakkabaka.dev/Finding an IDOR by Learning the App’s Role Modelhttps://hakkabaka.dev/posts/2026/finding-idor-pm-case-study/https://hakkabaka.dev/posts/2026/finding-idor-pm-case-study/How understanding roles, visibility states, and configuration gates led to discovering an IDOR in a project management systemTue, 17 Mar 2026 05:17:19 GMT