Authorization is the what can you do? check after login. A paralegal edits client files but not billing; a partner does both. Common patterns: RBAC (role-based), ABAC (attribute-based), and per-record ACLs. Get this wrong and you have a data-leak-shaped hole.
Authorization
Also known as: permissions,access control,RBAC