Where is the best place to check user rights?

Question

Information Security

Let's say the user has a certain set of rights - editing, moderation, etc.
Where would you advise to check the availability of rights - in the controller before trying to update the model and immediately transfer to the desired View or check the rights in the model, then watch the errors from the controller and then decide what to do?
How is it more correct from the point of view of MVC?

Answer 1

In the controller - it is the controller of incoming requests.