Where should the access check code be in the controller or model?

Question

PHP

//checking is the driver? on success true
public static function isDriver() {
return Security::isAllowedForCurrentUser('trips_driver');
}
public static function isSecretary() {
return Security::isAllowedForCurrentUser('trips_secretary');
}
ps Called only in the controller.

Answer 1

Of course in a controller, the model only returns data, and the controller already contains the logic.