security for an VBCS application

Summary

Difficulty setting up security for VBCS application

Content

Hi,

We developped a vbcs application for our client.

It has hundreds of anonymous users and hundreds of customers with account.

Our task is to deliver an url for all of them and give them access to only their records.

(Some kind of fine grained access)

We have noticed that whatever url we give in the landing page, when the user surfes the applications, the url on the top shows the ID (primary key i supposes) and therefore it's easy to change it to another number and see someone else records.