Level 6A general security lesson, not from Base44's docs
A guessable id is not a lock
The scenario
PetPals sends customers a “private” link to their booking that relies on the record id being secret.
But the ids are consecutive, so a neighbour's id is easy to find.
Guided hint · Beginner mode
Look at the link itself. If the number at the end simply counts up (…/1014, …/1015), what actually stops a stranger changing it to their neighbour's number?