THE DEVELOPER'S GUIDE TO FINE-GRAINED AUTHORIZATION

Summary from the TLDR newsletter

In role-based access control (RBAC), each user has a role, each app section has a permission, and you're checking the user has the right to do what they're doing on every action or page load.