Users have roles, roles provide permissions, some permissions are parameterized: <a href="http:&#x2F;&#x2F;shiro.apache.org&#x2F;permissions.html" rel="nofollow">http:&#x2F;&#x2F;shiro.apache.org&#x2F;permissions.html</a>