BUG-14986 Authorization Bypass via Forceful Browsing

- A validation was added