I have been asked to activate a former systems security features. I got the data setup and now want to get the KISS method of providing the features.

I have read the docs and find them "light" as in beer.

Should I create a session object to carry the ID/Creds of the user who logged in?

How do I set a webpage to allow anyone or only allow an admin ie. page will not load because security is not set right?

How do I capture that this page is a high level and your not, and let the user know that they are out of luck?


TIA

__Stephen