role-based access control (RBAC) [R.863.1] to enforce the roles at the appropriate
boundaries.
Note that this approach may not protect against horizontal authorization, i.e., it will not
protect a user from attacking others with the same role.