Authorization Terminology is a Mess: Let’s Fix It
Summary
The article argues that authorization terminology is fragmented and proposes a six-axis taxonomy to separate model, architecture, and policy decisions. It clarifies that PBAC is an architectural choice for where decisions are evaluated, not a direct model like RBAC or ABAC, and provides practical guidance for comparing authorization approaches.