Authorization is the mechanism of controlling what actions users can perform in an application. Common patterns include Relationship Based Access Control and Attribute Based Access Control.