https://blog.stackademic.com/how-to-prevent-broken-access-control-in-net-8-the-ultimate-security-guide-for-developers-a834ecb3a7b5