I mean, checking that the user is accessing their own tabs and not someone else's, by matching the authenticated userid with the userid in the URL.