Authorization is the process of establishing a set of rules that describes the permissible actions that can be performed on a resource.
A simple guide to authorization
Authorization is something that's usually an afterthought. In this article we'll look at how we can do it properly.