[PA-DSS] 5.2.10 Failure to restrict URL access (consistently enforce access control in presentation

5.2.10 Failure to restrict URL access (consistently enforce access control in presentation layer and business logic for all URLs).