Authorization Part 3: Authorization rules

[ghost]

Right now the rules are set up to mimic the original design of the application:

• Instructors can perform all actions
• Students cannot perform any actions
• Unauthorized users (logged in, but not invited) cannot perform any actions
• Guest users (not logged in) cannot perform any actions