same idea as the last lab you most change the ID to access data that are for another user.
when you logged in and go to my account page, in the url section you would see some thing like :
my-account?id=c77e40ed-da19-4939-987c-c8ad4733c7ed
so every user has some thing like this and if you want to get access to the data of user Carlos at first step you need to find out the id of the user Carlos, lets plan with the web app to see we can find the id or not.
in the blog posts, there is author and when you hover or click on the author, you can see in the url there is some thing like this :
blogs?userId=c01430d1-9623-47bc-80c9-ea4abc558400
so you have the user id of the user Carlos now just go to my account and change it and see what could happens.
and done.