applying record filtering security to pages to prevent URL manipulation