الأدوار والصلاحيات والأذونات

في هذا الدرس

model who may do what.

الموضوعات المخطط لها

• An authority is one permission string, such as ORDER_READ.
• A role is a named group of permissions, such as ADMIN; in Spring a role is an authority with the ROLE_ prefix.
• RBAC (role-based access control): assign roles to users, and check roles.
• Keep roles few and meaningful (customer, admin); add finer permissions only when needed.
• A role says what kind of action is allowed, not which records.