What is an IDOR vulnerability, and how would you test for it in a complex property management application?
