Action Security is designed to prevent user from navigating to unintended places at your system. It prevents user from running actions that are not accessable from user interface. Please note that this is not a replacement for record rules or scuring your backend, Action Security simply prevents user from manipulating URL and force her to follow the links from the user interface.