Hiya, After authentication (authN) comes authorization (authZ); once you know who the user is, you need to know what they can do in your application.