Parameter Tampering

Dear all,     I want to know how can I avoid users to manipulate the URL and circumvent a security permission?     Example, user clicks a link: http://myweb.com/student_data/academic...