Export job ownership
Decide whether an export job, its file, and its status are bound to the account that created them.
Level: intermediate
Tools: Burp Suite, browser devtools
Pipeline
Start an export you are allowed to run at {url}, save the job id, then as a second account you control request the job status and download and record whether the response stays empty.