The rigths management libraries available today are all based on the principle: everything is open and you close it explicitely. Fortress is immediately closing access to every actions of every controllers when you install it. It's then up to you to open the allowed actions.