Do we need to implement security to prevent any unauthorized user from manually entering the url to access something they shouldn't be able to see.

For example: if a user is allowed to see http://localhost:8080/csjobs-exam/job/view.html?id=1

Do we need to prevent them from accessing http://localhost:8080/csjobs-exam/job/view.html?id=2

even if there is no clickable link to get to that address?

Thanks