We are building tools to automate lot of the security flaws found across tech companies. Lot of the bugs are generic across many companies, so its better to automate them if possible. For the above tool, which basically checks for direct object reference, please use two different test accounts.