authenticated user is authorized to access a restricted service or
334 Software Security Assurance State-of-the-Art Report (SOAR)
Appendix E Security Functionality
protected resource. The policy for authorization may be based on the