Adopting the usual permission checking mechanisms based on role to access different areas/views of the website.