Better approach to restricting users access to managed controllers?

[eluser]Aken[/eluser]
It depends on how you set up the permissions. If you alter the user's session, or you define permissions on each page load separately from the user's session data, it will refresh automatically with no re-log in necessary.

Just gave me an idea for a modification to the Session library, actually.