Glossary: System Design Basics in Rust

Authorization

Deciding what an already-identified caller may do. A customer may read their own orders, but only staff may read everyone's.