Verify Acceptable Usage

• Authorization is a “yes” or “no” decision
• Also check that the activity requested is allowed
• Example: A user is granted authroized access to a stack. They should only be allowed perform push and pop operations.