Access Control

Who can see or change what.

Access control is the rule set for accounts, profiles, communities, messages, and creator entitlements. The repository does not contain an authorization service. The requirement is that paid content stays hidden until an entitlement exists, and that private messages are not world-readable.