I'm trying to follow the documentation on authorization, but am having some problems grasping how it will work in the end.
Where does it store the permissions? And does it work with roles?
If it does work with roles, how do you apply a role to a user?