Decide who gets in, and what they can touch.

• ▸ A visitor arrives with a request.
• ▸ Decide: allow, allow but limit, or refuse.
• ▸ Each answer explains authentication vs authorisation.