What is User Authorization? What options do I have? Can't I just use an Identity claim?
Andrew Clymer guides in exploring access control, what we had before with RBAC (Role-Based Access Control) and why we should be moving towards an ABAC (Attribute-Based Access Control) approach.