Security:You can display all records in any module and any related module

You can display all records in any module and any related module (this is a serious issue and exists in hundreds of places, it results from the fact that the system doesn’t verify actual permissions in a number of places). Example: index.php?module=Contacts&relatedModule=ModComments&view=Detail&record=17&mode=showRelatedList&relationId=165&tab_label=ModComments&app=MARKETING (you have to match the parameters/actions depending on the version