Authorization / access control for Phoenix apps: server-side checks, ownership verification, scope-based queries to prevent IDOR, and policy modules.
