IDORacle: Template-guided data-access mediation for object-level authorization in database-backed applications

IDORacle is a research system designed to prevent IDOR (insecure direct object references, where a user can access data belonging to another user by manipulating request parameters) vulnerabilities in database-backed applications by using templates to guide how data access should be controlled at the object level. The system helps ensure that applications properly check whether a user has permission to access a specific piece of data before returning it. This research addresses a common security problem in web applications where developers forget to implement proper authorization checks.