authorization vs authentication

I think you mean "role based authorization" here.