restrict user access data via urls (other users data ) Fix