The facility for checking a user's level of access to a resource against the user's desired access or the result of that check.