Sunny has developed a report and form on CUSTOMERS, which is open to partners. The report displays only customers associated with partners, based on their user credentials. Partners can click an Edit button to go to a form page to update their customers. Sunny is concerned that IT savvy users will be able to alter the
URL to be able to see and update records from other partners.
What must Sunny do to protect the form page from URL tampering?