boundaries.
Note that this approach may not protect against horizontal authorization, i.e., it will not
protect a user from attacking others with the same role.
Ensure that access control checks are performed related to the business logic. These