Simple role based access control with a denied page.