https://medium.com/@tihomir.manushev/fixing-owasp-api6-2023-unrestricted-access-to-sensitive-business-flows-in-symfony-7-ed04dd4e13fb
