public function isAuthorized($user = null)
    {
        //Any registered user can access public functions
        if (!$this->request->getParam('prefix')) {
            return true;
        }

        //Only admin and managers can access all admin actions
        if ($this->request->isAdmin()) {
            return $this->Auth->isGroup(['admin', 'manager']);
        }

        //Default deny
        return false;
    }