Thank you very much, but I see a security risk in doing it like that. If you build a URL like …ItemPage/Id or even —ItemPage/User/Id, then another user, when logged in, could change that URL in the browser and access somebody else´s property, right?
A way to prevent this is that the ItemPage only recieves an Id and fetches this row with the UserId added, IN CODE, so not in URL.
Maybe I am missing something, it´s still a bit fuzzy to me.