The Domino security provider performs only authentication and attribution. It uses the HTTP/DIIOP authentication mechanism supported by Domino server.
The Domino provider fulfills authentication services only with the DominoLoginModule class; authorization, and attribution is not directly supported because Domino's login provider offers only username and password authentication.
If you require authorization services, you can use one of the Domino providers along with other provider types. For example, if you require authorization services, you can use DominoLoginModule with RoleCheckAuthorizer.