Which application attack exploits holes in access controls that allow a user to directly access files or other resources?

Question $7$ options:

Direct file or resource access

Extra$-$application data access

Malformed input