Authorization is the act of granting access to a specific resource. This can be an entire application, or a much smaller piece of functionality. Authorization is also referred to as access control.
The de facto standard for fine-grained authorization is eXtensible Access Control Markup Language (XACML). For coarse-grained authorization on Internet scale, OAuth is an important standard.
| Previous: Authentication | Next: Auditing |
referral ID, which provides me with a small commission for each sale. Thank you for your support.
[...] is to determine appropriate access control policies. It is wasteful to protect all your information at the highest level, so you want to [...]
[...] another example, imagine an implementation of the XACML specification for authorization. The “X” in XACML stands for [...]