Authorization decides which resources and actions an authenticated identity may use. Keep it separate from authentication: a valid login does not automatically grant every permission.
Authorization
Authorization decides which resources and actions an authenticated identity may use. Keep it separate from authentication: a valid login does not automatically grant every permission.