I'm having a problem of designing a common functionality of hiding information created by a user from other users. As an example,to edit Products created by USER1, normally we use one of following.

1. /Product/Edit/Id/1
2. /Product/Edit?Id=1

[![enter image description here](https://i.stack.imgur.com/JPHDR.jpg)](https://i.stack.imgur.com/JPHDR.jpg)

My concern is, if USER2 got the Id, 1, he also able to access Product with Id=1, which was created by USER1. How to restrict USER2 accessing USER1'S data? This may needs to apply for every module in the project. Is there a common way to achieve this? Thanks