Strategy 1

Restrict the URI space.

/public/*
/private/*
/admin/*
  • Simple, visible, and easy to explain.
  • Works well for coarse application areas.
  • Breaks down when the same resource can contain public and private facts.