> For the complete documentation index, see [llms.txt](https://itrp19-notes.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control.md).

# Access control

- [Lab: Unprotected admin functionality](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/lab-unprotected-admin-functionality.md)
- [Unprotected admin functionality with unpredictable URL](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/unprotected-admin-functionality-with-unpredictable-url.md)
- [User role controlled by request parameter](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/user-role-controlled-by-request-parameter.md)
- [User ID controlled by request parameter, with unpredictable user IDs](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/user-id-controlled-by-request-parameter-with-unpredictable-user-ids.md)
- [User ID controlled by request parameter with password disclosure](https://itrp19-notes.gitbook.io/notes/reference/hacking/port-swigger/access-control/user-id-controlled-by-request-parameter-with-password-disclosure.md)