Enforcing role-based access control and session status.