1. Proper access level check 2. If any violation meet then properly notify to user or redirect with proper message.