Development is evolving and thanks to modern application frameworks, traditional injection vulnerabilities or authentication problems are seen less and less frequently. However, one thing that always seems to remain equally difficult to implement securely is complex application access control.