Concept

View and action authorization
Users are only allowed to do things in the system according to their permissions. What elements they get access to and what they are allowed to see/select/...