4 ms·

I've never been in a situation where this "confusion" happens (nor in english or spanish, where we use autenticación and autorización), authentication and autho

I've never been in a situation where this "confusion" happens (nor in english or spanish, where we use autenticación and autorización), authentication and authorization are standard terminology in all IT and Infosec. I know acronyms and stuff but if it creates confusion just use the damn complete word, I don't get why create a problem.

mkroman 2y ago
Agreed. Generally just avoid jargon when you aren't sure the reader knows the lingo.
Pxtl 2y ago
Because people frequently in English use the abbreviation "auth", which is ambiguous.
- ziddoap 2y ago
  So people should not use the abbreviation when it isn't clear. Problem solved, no renaming needed. If people are too lazy/whatever to use the full word, they are going to be too lazy/whatever to change to a different word entirely.
  - Someone1234 2y ago
    Nothing is being renamed. "Permissions" is another common name that dates until at least the 1980s in computing. The suggestion here is to use one common and correct phrase instead of another common and correct phase. Login/Identity are also completely standard. The only reason to keep using Auth/Auth is because you want to be less easily understood by others. Calling it "renaming" is itself odd to me, if someone said Identity/Permission or Login/Permission, it wouldn't even flag to me as being unusual or non-standard. I'd know exactly what they meant.
    - ziddoap 2y ago
      >The suggestion here is to use one common and correct phrase instead of another common and correct phase Permissions are a subset of authorization.
      - hu3 2y ago
        Could you please provide examples. I see comments stating that, but no examples.
        ziddoap 2y ago
        Permissions are a technical method which are used to implement and enforce authorization policies. However, authorization policies are not composed of just permission controls. You may find that your user account has permission to read the employee salary database. However, you may not be authorized to read that database by corporate policy because you are not a manager. Perusing that database will still get you in trouble, because you aren't authorized to do so, even though your account had the technical permissions to access it. You may find that you have permissions to screenshot internal databases and post them on facebook, however since you are not authorized to do so by policy, you will be fired. Etc.
        hyperpape 2y ago
        > You may find that your user account has permission to read the employee salary database. However, you may not be authorized to read that database by corporate policy because you are not a manager. It's true that there are technical enforcement mechanisms, and corporate policies, but it is false that the former must be called permissions, and the latter must be called authorizations. The policies can easily be called either authorization or permission. It is true that we refer to e.g. Unix file permissions, and a corporate policy is more likely to use "authorization" but this is not a semantic difference--the corporate policy would be correct and binding if it used the word permission. If a fellow employee asks you "do I have permission to do this?" you must say "no" (or alternately "you're not permitted, even though the computer will not enforce that"). Saying "yes" because there is a technical permission would be a very bad idea.
- AbraKdabra 2y ago
  So the problem is the people not the words.
- OOPMan 2y ago
  Tends not to matter, the context usually makes it clear what is being discussed.

mkroman 2y ago

Agreed. Generally just avoid jargon when you aren't sure the reader knows the lingo.

Pxtl 2y ago

Because people frequently in English use the abbreviation "auth", which is ambiguous.

ziddoap 2y ago
So people should not use the abbreviation when it isn't clear. Problem solved, no renaming needed. If people are too lazy/whatever to use the full word, they are going to be too lazy/whatever to change to a different word entirely.
- Someone1234 2y ago
  Nothing is being renamed. "Permissions" is another common name that dates until at least the 1980s in computing. The suggestion here is to use one common and correct phrase instead of another common and correct phase. Login/Identity are also completely standard. The only reason to keep using Auth/Auth is because you want to be less easily understood by others. Calling it "renaming" is itself odd to me, if someone said Identity/Permission or Login/Permission, it wouldn't even flag to me as being unusual or non-standard. I'd know exactly what they meant.
  - ziddoap 2y ago
    >The suggestion here is to use one common and correct phrase instead of another common and correct phase Permissions are a subset of authorization.
    - hu3 2y ago
      Could you please provide examples. I see comments stating that, but no examples.
      - ziddoap 2y ago
        Permissions are a technical method which are used to implement and enforce authorization policies. However, authorization policies are not composed of just permission controls. You may find that your user account has permission to read the employee salary database. However, you may not be authorized to read that database by corporate policy because you are not a manager. Perusing that database will still get you in trouble, because you aren't authorized to do so, even though your account had the technical permissions to access it. You may find that you have permissions to screenshot internal databases and post them on facebook, however since you are not authorized to do so by policy, you will be fired. Etc.
        hyperpape 2y ago
        > You may find that your user account has permission to read the employee salary database. However, you may not be authorized to read that database by corporate policy because you are not a manager. It's true that there are technical enforcement mechanisms, and corporate policies, but it is false that the former must be called permissions, and the latter must be called authorizations. The policies can easily be called either authorization or permission. It is true that we refer to e.g. Unix file permissions, and a corporate policy is more likely to use "authorization" but this is not a semantic difference--the corporate policy would be correct and binding if it used the word permission. If a fellow employee asks you "do I have permission to do this?" you must say "no" (or alternately "you're not permitted, even though the computer will not enforce that"). Saying "yes" because there is a technical permission would be a very bad idea.
AbraKdabra 2y ago
So the problem is the people not the words.
OOPMan 2y ago
Tends not to matter, the context usually makes it clear what is being discussed.