An authorization framework used for building and managing fine-grained access control within applications.