Which of the following best describes one of the OWASP Top $10$ Vulnerabilities $-$ Broken Access Control?

$1.$

Broken access control is the lack of verification of proper access to a requested object resulting in the possibility for attackers to spoof the request to access data without proper permission.

$2.$

Broken access control is a vulnerability caused by the way a web application recognizes users.

$3.$

Broken access control refers to a vulnerability that allows an attacker to change an object into a format that can be transmitted or persisted on disk.

$4.$

Broken access control is the failure to detect an intrusion in a timely manner due to insufficient logging and monitoring.