Portswigger: User role controlled by request parameter

Using the Portswigger Access Control Labs to learn a bit about web security.