Enforced page permissions for direct URLs

Users that lack permissions to an object can no longer access pages whose data source is that object directly via URLs.