Backlift has an auth api that it uses to establish a user session. As users create and modify data during their session, backlift checks to ensure that the user has appropriate permissions. More data is available here: http://backlift.github.io/docs/authorization.html#authorizat...