A detail page receives an employee ID in a URL. Which two checks are required for secure data access? Select TWO.

1. Apply appropriate parameter/state protection and safe value binding
2. Grant access whenever the page link was hidden from the navigation menu
3. Validate that the authenticated user is authorized for that employee record
4. Assume a numeric ID can never be manipulated