Lawyer form with string in browser

[manueurofax]

Hi,
I found out that with a string similar to the following from someone who has permission to use the Views,
https://www.appsheet.com/start/[...]#view=Anagrafica_Form

you can get the Form to add a new record, even if this user has no permission to add records.
And he can save records even without data, even if the columns are not accessible to him

How can you prevent access or prevent the record from not being saved?

Thanks for your attention