For web applications, make sure that the access control mechanism is enforced correctly
at the server side on every page. Users should not be able to access any unauthorized
functionality or information by simply requesting direct access to that page.
One way to do this is to ensure that all pages containing sensitive information are not