authorization

Also known as "authz". Describes what a person can do.

e.g.

  • is this user allowed to update this auction?
  • is this user allowed to view this resource?