Three layers of access control — sitewide, per-post, and per-taxonomy — all in the free plugin.