Route permission and access control as simple as it can get