docs: add guide for defining application authorization policies

docs/content/how-to-guides/index.md

@@ -11,3 +11,9 @@ Practical, task-oriented guides for building applications with UltimateAuth.
 ## Available Guides
 
 - [Protect a Page](/docs/how-to-guides/protect-a-page) — Secure Blazor pages and UI sections using UltimateAuth and ASP.NET Core authorization.
+- [Define Authorization Policies](/docs/how-to-guides/define-authorization-policies) — Build reusable application policies, compose authorization requirements, and separate security decisions from business logic.
+
+## Related Documentation
+
+- [Authorization](/docs/plugin-domains/authorization) — Understand structured actions, permissions, roles, and authorization scopes.
+- [Policies & Access Control](/docs/plugin-domains/policies) — Explore policy evaluation, access contexts, and the authorization pipeline.

docs/content/plugin-domains/authorization.md

@@ -293,6 +293,8 @@ Authorization succeeds only when the required conditions are satisfied.
 
 This approach allows UltimateAuth to separate reusable security requirements from the business operation being protected.
 
+> **Want to build your own authorization policies?** Follow [Define Authorization Policies](/docs/how-to-guides/define-authorization-policies) for a practical example of enforcing Separation of Duties, composing policies, and keeping authorization rules separate from application services.
+
 ## AccessContext and AccessOrchestrator
 
 Authorization needs a trustworthy representation of the operation being evaluated.

docs/content/plugin-domains/policies.md

@@ -379,7 +379,7 @@ Such policies should preserve the framework's security boundaries:
 - Do not use broad permission grants to override target or tenant restrictions.
 - Keep policy applicability and evaluation behavior explicit.
 
-Detailed custom policy implementation and registration examples belong in [How-to Guides](/docs/how-to), where they can be presented alongside complete application code.
+For a complete, practical example of implementing and registering custom application policies, see [Define Authorization Policies](/docs/how-to-guides/define-authorization-policies). The guide demonstrates how to enforce Separation of Duties, compose multiple authorization requirements, and simplify application services.
 
 ## Architectural Perspective
 

docs/website/CodeBeam.UltimateAuth.Docs.Wasm/CodeBeam.UltimateAuth.Docs.Wasm.Client/wwwroot/docs/docs-index.json

@@ -272,6 +272,13 @@
     "Group": "how-to-guides",
     "GroupOrder": 9
   },
+  {
+    "Title": "Define Authorization Policies",
+    "Slug": "how-to-guides/define-authorization-policies",
+    "Order": 3,
+    "Group": "how-to-guides",
+    "GroupOrder": 9
+  },
   {
     "Title": "Migration Guides",
     "Slug": "migration/index",

docs/website/CodeBeam.UltimateAuth.Docs.Wasm/CodeBeam.UltimateAuth.Docs.Wasm.Client/wwwroot/docs/how-to-guides/index.json

@@ -1,14 +1,19 @@
 {
   "Slug": "how-to-guides/index",
   "Title": "How-to Guides",
-  "Html": "\n\u003Cp\u003EPractical, task-oriented guides for building applications with UltimateAuth.\u003C/p\u003E\n\u003Ch2 class=\u0022mud-scrollspy-section\u0022 id=\u0022available-guides\u0022\u003EAvailable Guides\u003C/h2\u003E\n\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022/docs/how-to-guides/protect-a-page\u0022\u003EProtect a Page\u003C/a\u003E \u2014 Secure Blazor pages and UI sections using UltimateAuth and ASP.NET Core authorization.\u003C/li\u003E\n\u003C/ul\u003E\n",
+  "Html": "\n\u003Cp\u003EPractical, task-oriented guides for building applications with UltimateAuth.\u003C/p\u003E\n\u003Ch2 class=\u0022mud-scrollspy-section\u0022 id=\u0022available-guides\u0022\u003EAvailable Guides\u003C/h2\u003E\n\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022/docs/how-to-guides/protect-a-page\u0022\u003EProtect a Page\u003C/a\u003E \u2014 Secure Blazor pages and UI sections using UltimateAuth and ASP.NET Core authorization.\u003C/li\u003E\n\u003Cli\u003E\u003Ca href=\u0022/docs/how-to-guides/define-authorization-policies\u0022\u003EDefine Authorization Policies\u003C/a\u003E \u2014 Build reusable application policies, compose authorization requirements, and separate security decisions from business logic.\u003C/li\u003E\n\u003C/ul\u003E\n\u003Ch2 class=\u0022mud-scrollspy-section\u0022 id=\u0022related-documentation\u0022\u003ERelated Documentation\u003C/h2\u003E\n\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022/docs/plugin-domains/authorization\u0022\u003EAuthorization\u003C/a\u003E \u2014 Understand structured actions, permissions, roles, and authorization scopes.\u003C/li\u003E\n\u003Cli\u003E\u003Ca href=\u0022/docs/plugin-domains/policies\u0022\u003EPolicies \u0026amp; Access Control\u003C/a\u003E \u2014 Explore policy evaluation, access contexts, and the authorization pipeline.\u003C/li\u003E\n\u003C/ul\u003E\n",
   "Headings": [
     {
       "Id": "available-guides",
       "Text": "Available Guides",
       "Level": 0
+    },
+    {
+      "Id": "related-documentation",
+      "Text": "Related Documentation",
+      "Level": 0
     }
   ],
-  "SourceHash": "D45E8C30B26AF54F802D9926DA15D933AA6342A064BE1D54F90087F8F64A49AA",
+  "SourceHash": "9E526FABA88CFC7B65B8CEEB5F6C14C715A1953F6AB5E82BCF2E3A76C56BB48A",
   "BuilderVersion": "1"
 }