...
Authorization decisions can be made based on
- Attribute based Approach Approach (What you are)
- Claims based Approach (What someone says about you)
- Group/Role based Approach (What you belong to)
- Rule based Approach - (What the application computes about you)
...