Restrict access to your controller actions. Supports basic model level restrictions as well
Andrew Stone
N/A