Thoughts On User / Page Request Security Model 

<cfif NOT XXXXX.GetPermissions( "news" ).CanAccess()>
	<!--- Throw Authorization error. --->
</cfif>
 
<!--- Check Add rights. --->
<cfif XXXXX.GetPermissions( "news.edit" ).CanAccess()>
 
	<a href="##?event=news.edit">Add News Item</a>
 
</cfif>
 
<!--- Check edit rights. --->
<cfif XXXXX.GetPermissions( "news.edit" ).CanAccess( Target = 2403 )>
 
	<a href="##?event=news.edit&id=2403">Edit Item</a>
 
</cfif>

For Cut-and-Paste