Not to be confused with Authentication. Authentication is about "who is the user" and authorization is about "is the user allowed to execute a certain action".

Authorization is usually solved by providing roles.