django-access-review provides a methodical investigation framework for finding IDOR and access control gaps in Django codebases. it emphasizes understanding the specific authorization model before searching for vulnerabilities, with concrete tracing procedures and confidence-based reporting.