Let's say I have a screen that lets the user edit a person's general information, and this screen can be access by either the person themselves or by administrators. The administrators will be coming from a parent list of people, and ideally that would be defined as the parent for this entity. The person, though, has no access above this level.
I usually return null unconditionally in these situations, and provide nav links for admins to get back up, if necessary. I'm also considering having the parent be conditional, and return the parent list only if the user is an admin. What's the best practice here?