isProtected, isAuthenticated, isAuthorized

This is how most Policy Agent works, be it CA SiteMinder or ForgeRock OpenAM.

Policy Agent always go through these 3 processes:
1. isProtected?
2. isAuthenticated?
3. isAuthorized?

Simple.

.