Prevent insecure direct object reference