During security testing, the user profile update request was analyzed to determine how profile information was processed. It was observed that the request contained a parameter representing the user's role. By intercepting the request and modifying this parameter before forwarding it to the server