Almost in every project, there are authentication processes, and a bunch of the “best practices” were written in all known technologies.

But what happens after the user makes the login? After all, he, by far, cannot do everything. How to define what he can see and what not. What buttons does he have the right to click on, and what to change, create, and delete?
In this session, we will consider the approach used for solving these problems in a web application.