3 ms·
In addition to what the neighbor comment says about authorization, an ACL is an internal service: it provides an “if (the user is allowed to X) then ...” to the
by aasasd 7y ago
In addition to what the neighbor comment says about authorization, an ACL is an internal service: it provides an “if (the user is allowed to X) then ...” to the business logic code. It's not a user-facing service.
- alexeldeib 7y agoI did assume this system handled authn as well as authz, which was a mistake.