You are viewing user id 2. The id is a direct object reference with no ownership check - walk it (id=1) to read the admin's private note.
CWAP Prep Labs · HackXpert Coaching · The XSS Rat · authorized lab use only