How Attribute-Based Access Control Helps You Write Better Authorization Rules
Every application that handles user data eventually hits the same problem: not all users should see the same things. A junior nurse should not be able to access every patient record in the hospital. A