User entering URL .Net Core

Question

there are certain action that i dont allow for certain users, however they can just put in the parameters manually and that\'s the issue. I have to put a lot of If