Insecure Direct Object Reference (IDOR)

What is an IDOR attack, and what can we do to prevent it?