RFC 2196:Site Security Handbook
RFC-Ref

Checking Authorization


Click on the red underlined text to get to the source

... process) with respect to all resources (objects) is impossible in a reasonable system. In a real system certain techniques are used to simplify the process of granting and checking authorization(s). ...



Google
Web
RFC-Ref