Portswigger: User role can be modified in user profile

Using the Portswigger Access Control Labs to learn a bit about web security.