ACRA is a Burp Suite extension for advanced authorization security auditing, correlating URI, identity, role, tenant, resource ownership, workflow state, policy, and evidence to identify access-con...