Here is a short Insecure Direct Object Reference demonstration video, which appears in the AppSec Labs Application Security Awareness e-learning software. It portrays the fourth of the OWASP Top 10 application security threats.
https://AppSec-Labs.com