Glossary: System Design Basics in PHP

Authorization

Deciding what a known caller may do, such as letting customers read their own orders but only staff read everyone's.