Best way to reliably restrict/redirect feature (not security) access based on a different db field's (scenario in post)

[Apple]

I use the Globals steps (NodeJS only I think; steps that run on every page load, server-side), check the current route and use the Redirect step if applicable

See the user’s screenshot and my reply: (ignore the Security Restrict, assume it’s a Redirect step)

Security Restrict Global Restriction on API actions

Hey everyone just a quick question. I was trying to think of a quicker and easier way (and hopefully more foolproof way) to ensure that all the actions that need protecting are protected. Rather than having to add the security restrict to each api workflow each time. What I have done is added a Condition in the Global.Json which does a condition to see if the $server.url contains the path I am looking for. It will then run my security Restrict. Is this the best way to do this or is there a bett…