What is the use case behind allowing access to a model, but not access to the controller?
That makes no sense at all.
What is the use case behind allowing access to a model, but not access to the controller?
That makes no sense at all.