Use model-level authorization with a very granular roles and permissions definition.
25,631 Downloads
MIT