Fisher Investments Interview Question

How do you handle role based authorization?