Merge pull request #10378 from marmelab/doc-access-control-video

[Doc] Add video tutorial to Access Control documentation

docs/Permissions.md

@@ -5,18 +5,15 @@ title: "Authorization"
 
 # Authorization
 
+<iframe src="https://www.youtube-nocookie.com/embed/2loA65et3JU" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen style="aspect-ratio: 16 / 9;width:100%;"></iframe>
+
 Once a user is authenticated, your application may need to check if the user has the right to access a specific resource or perform a particular action. React-admin provides two ways to do so:
 
 1. **Access control** relies on `authProvider.canAccess({ resource, action })`, which returns whether the user can access the given resource and action.
 2. **Permissions** rely on `authProvider.getPermissions()`, which returns a list of permissions that your components can inspect.
 
 Depending on your needs, you can implement one or the other or both. We recommend Access Control because it allows you to put the authorization logic in the `authProvider` rather than in the code. 
 
-<video controls autoplay muted loop>
-  <source src="./img/AccessControl.mp4" type="video/mp4"/>
-  Your browser does not support the video tag.
-</video>
-
 ## Access Control
 
 With Access Control, the `authProvider`is responsible for checking if the user can access a specific resource or perform a particular action. This flexibility allows you to implement various authorization strategies, such as:
@@ -27,6 +24,11 @@ With Access Control, the `authProvider`is responsible for checking if the user c
 
 Use the `authProvider` to integrate react-admin with popular authorization solutions like Okta, Casbin, Cerbos, and more.
 
+<video controls autoplay muted loop>
+  <source src="./img/AccessControl.mp4" type="video/mp4"/>
+  Your browser does not support the video tag.
+</video>
+
 ### `authProvider.canAccess()`
 
 To use Access Control, the `authProvider` must implement a `canAccess` method with the following signature: