[Owasp-delhi] Fw: "Broken Access Control" v/s "Insecure Direct Object Reference"

[sureshtiwary]

Dear OWASP Delhi,



Anyone who could clear highlight the differences and similarities between Broken Access Control and Insecure Direct Object Reference with good examples.



Thanks & regards,

Suresh



Note: Forwarded message attached



-- Original Message --



From: "sureshtiwary" sureshtiwary at rediffmail.com

To: owasp-delhi at lists.owasp.org

Subject: "Broken Access Control" v/s "Insecure Direct Object Reference"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-delhi/attachments/20090805/57f59cc7/attachment.html 
-------------- next part --------------
An embedded message was scrubbed...
From: "sureshtiwary" <sureshtiwary at rediffmail.com>
Subject: "Broken Access Control" v/s "Insecure Direct Object Reference"
Date: no date
Size: 2846
Url: https://lists.owasp.org/pipermail/owasp-delhi/attachments/20090805/57f59cc7/attachment.mht