URL-manipulation - still a relevant threat

And now the Canadian Passport application web-site was discovered to have a fault - by a simple change of the ID in the URL, all applications and privacy data of other users where available. 

Duh.

Discovered at the I.T. Security Guy.