3 ms·
Never heard of it. Just don't use the "auth" contraction for "autorization". Only for authentication. Or not at all. The system state which grants access to a
by kazinator 2y ago
Never heard of it.
Just don't use the "auth" contraction for "autorization". Only for authentication. Or not at all.
The system state which grants access to a resource based on a user's credentials is "permissions".
Authentication is the process of establishing belief in the user's credentials.
Authorization is the human assigned permission to a resource which may or may not be reflected by permissions. Incorrectly set permissions can allow unauthorized access to a resource.
E.g. if /etc/shadow is accidentally made rw-r--r--, that doesn't mean everyone is authorized to access the password hashes. Doing so may still violate the organization's IT policy.