As well as access levels, web.auth also supports role based authorisation, groups of users, and disabling user accounts by setting the active property.
active
