Authenticating models?

[eluser]Jelmer[/eluser]
If all the checking is done in your controllers before any actions are taken by your models there shouldn't be a concern.

So if you have the checking for example in your controller constructors, any users not authorized should be redirected before any model is used.