Admin.cfc

component extends="app.controllers.Controller"
{
	function config() {
		filters(through="checkAdminPermissions");
	}

  // This is highly simplified for illustration only
  private function checkAdminPermissions(){
    if(session.user.role != "admin"){
      abort;
    }
  } 
}