https://softwarepatternslexicon.com/d/security-patterns/access-control-and-authorization/