anchor.diff:  - http://lucumr.pocoo.org/2013/11/17/my-favorite-database/
   - http://www.niwi.be/2014/06/07/stateless-authentication-with-api-rest/
   
  -WARNING: this backend does not implement the `IAuthorization` protocol and is not valid
  -backend for using as authorization backend.
  -
   
   == Authorization
   
   An other part of auth process is the authorization.
  +
   
   === Introduction
   
  
positive.code:         (wrap-authorization backend))))
  ----
  
  If you want to know how it really works, see xref:how-auth-works[How auth works] section or
  take a look on examples.
  
  
  [[access-rules]]
  == Access Rules
  
  
negative.code: 
  Buddy exposes two ways to do it:
  
  - Using a _wrap-access-rules_ middleware and define a decoupled list access rules.
  - Using a _restrict_ decorator for set specific rules handlers to concrete ring handler.
  
  Here are comple examples of how we can done it:
  
  