Permissions, roles, policies, and enforcement points. Use when designing RBAC/ABAC or fixing authZ holes.
