Term Kind Topic What it is
Object-Level Authorization BOLA, IDOR concept Authorization Checking that the caller is entitled to the specific record they requested, not merely that they may call the endpoint.
Role Explosion concept Authorization The proliferation of narrowly-scoped roles that occurs when RBAC is used to express rules that actually depend on context.