Authorization

Deciding what a known caller is allowed to do, such as a customer reading only their own orders while staff read everyone's.

Where the book teaches it