Unsecure direct object references, Specific application issues, Enterprise Security Architecture