Prevent direct access

[eluser]Giga[/eluser]
I created an authentication mechanism that makes access to different areas for each type of user logged. However, to avoid direct access I thought of using a hook before the controller ... This is a good idea?
I would like to avoid writing the control code for each function of the controller ...
Or just put the control code in the constructor of the controller?