The task is basically about Insecure Direct Object Reference meaning .. accessing a resource that you are not supposed too :)

https://youtu.be/z4KnpUCuSk0