Implementing Attribute-Based Access Control

Use custom attributes to define granular access levels on controllers and actions.