How do IFS authorities work?

This IBM Infocenter article does a good entry-level explanation.