OWASP API Security Top 10 2019 Checklist

general > broken-object-level-authorization-use-guids

Guidance

Use random and unpredictable values as GUIDs for records’ IDs.

You must define string patterns using the following characters: "^[{]?[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?

Applies to Parameter

Constraint

Type: Declarative Validation