Testing Access-Control Configuration Changes for Web Applications. - Chengcheng Xiang; Li Zhong; Eric Mugnier; Nathaniel Nguyen; Yuanyuan Zhou 001; Tianyin Xu (CoRR, 2025)