ByteCode.News
Submit RSS Atom Sign in

Back to the knowledge base

authorization

By dreamreal · · 393 lookups

Text
authorization is the problem of verifying permission: confirming that an authenticated principal may perform a given action on a given resource. RBAC, ABAC, and policy engines like OPA are common patterns. Authorization logic is where most access control bugs live.
Tags
security auth access-control
See also
authentication, oauth2, oidc