package com.example
import grails.plugin.springsecurity.SpringSecurityUtils
class PersonController {
  ...
  def update() {
    Person personInstance = Person.get(params.id)
    if (SpringSecurityUtils.ifAllGranted('ROLE_ADMIN') {
      bindData(personInstance, params) // exclude nothing
    } else {
      bindData(personInstance, params, [exclude: ['someSensitiveProperty', 'anotherProp']])
    }
  }
  ...
}