Infrastructure
Authorization
Authorization is the decision whether a requester may perform a particular action on a particular resource under the applicable policy. Identity, ownership, role, relationships and context can matter. It includes public-access decisions as well as authenticated ones; hiding a button or accepting a login does not enforce resource access.
Reviewed
Sources
Free complete lesson
This definition and the complete practical lesson are free. The interactive reader loads the lesson examples without a membership.