...
Access Control Decisions (groups, roles, privileges, and external authorization)
Overview
Applications have various access control needs to control which subjects have access to what. This is generally for applications which require authentication, though the authorization could also apply to anonymous subjects (who would get privileges from an anonymous role).
...