title: MVC implement security to prevent accessing other users information
body: <p>I am familiar with roles and authentication attributes in MVC, but as I am adding more and more information onto my database I think I ma going to run into a problem with primary keys being unencrypted or accessible. </p>
  
  <p>I am using identity 2.1, so when a user is logged in I have access of their UserId and their CustomerID but my concern is that any user can go to /Customers/Delete/3 or any CustomerID and have access. Even if I created a GUID id or other encryption it could still be vulnerable to brute force attacks. </p>
  
  <p>Is there a way in MVC to implement a check to only allow the current user to load pages that are related to them?</p>