jellyfin/Jellyfin.Api/Auth/DefaultAuthorizationPolicy
..
DefaultAuthorizationHandler.cs
DefaultAuthorizationRequirement.cs