Glossary: Web App Security and Authentication

Permission

Also written: RBAC, role-based access control

A permission is a named action like orders:update. RBAC gives each user a role and each role a list of permissions, so code asks 'may this user do this?'