[eluser]PhilTem[/eluser]
That's all kinda unnecessary, you can just add an underscore in front of the function name and it will become inaccessible from the URI. That's one thing. Furthermore, what I guess is also what you want to have, you may want to check for permissions, i.e. implement an authentication and authorization library/module/whatever, that will be taking care of checking permissions.
@Kraig What do you do when you have hundreds of such methods? Do you add one line per method to the routes file? Isn't that kinda over-bloating everything? #justaskin