Security with Struts

[GuyBrush Treepwood]

I'm making a web-based bookmark management system, using Struts.
To store bookmarks, one needs a useraccount. The link to your bookmarks
only is visible when you are logged in.

jsp excerpt:

<logicresent name="accountBean" scope="session">
<logic:equal name="accountBean" property="authenticated"
value="true" scope="session">
<html:link page="/service/signoff.do">Sign Off</html:link>|
<html:link page="/service/editAccountForm.do">Account</html:link>|
<html:link page="/tofillin">Preferences</html:link>|
<html:link page="/tofillin">Bookmarks</html:link>
</logic:equal>
</logicresent>


My question is: is it possible to view another user's bookmarks, without
knowing his password? Or is this enough security?