Use model-level authorization with a very granular roles and permissions definition.
25,487 Downloads
MIT