Authorization
Deciding what a signed-in person may do. Authentication answers "who", authorization answers "is this allowed", and a page that confuses the two has a security hole.
- See also: Authentication
- Used in: Full-Stack Web App
Deciding what a signed-in person may do. Authentication answers "who", authorization answers "is this allowed", and a page that confuses the two has a security hole.