Requirement 6.5.10

Failure to restrict URL access