Applying authentication architecture

Every app with authentication eventually needs to tackle authorization. In our case, once our product grew from a small experiment into a mid-sized application, it became clear we needed a proper model to keep users from doing things they shouldn't. To make the idea more concrete, let's imagine a simple blog with multiple authors and readers. Here's how I explored different approaches. The naïve…