Sam Bellen - Cant touch this

Knowing who your authenticated user is and whether they have access to your application is one thing. Figuring out if they should be able to perform a certain action on a specific resource is another. Protecting our data and allowing users to only do what they should be allowed to do can become quite complex as your application grows. Luckily there are multiple authorization approaches available. Wondering what the best solution for your application is? Let’s find out how we can protect our content by using roles and permissions, or attribute based authorization all the way to fine grained authorization looking for relationships between the user, actions and resources.