01
The property is the boundary
Authorization carries the property and the role with every operation, rather than being checked once at a login and trusted afterwards. A director at one association cannot reach another’s records by changing an identifier.