Disable cdrom/dvd RHEL 6.2 for non-root users

What is the best practice to disable the cdrom/dvd for non-root users?

I was able to move/rename the cdrom.ko file in RHEL 5, but RHEL 6 this does not work!