What do you use for authorization?

I can’t tell if most people don’t have a standardized system they use and just write in business logic but I can’t find a seemingly “default” solution for this.

Do people just roll their own version of it? Looking for feedback from a lot of devs