Authorization
Authorization is the process by which a system or service verifies whether a user or program has permission to perform a specific action or access a specific resource.
How it works
It typically takes place after authentication, determining what an authenticated entity is allowed to do. Authorization mechanisms (such as role-based access control) protect data and functionality by checking predefined policies and permissions, preventing unauthorized access, and are a core component of system security.
Examples
- 1.A social media platform decides whether you can delete someone else's post based on your account type.
- 2.An enterprise cloud storage system controls which files employees can view and edit based on their department and job level.
- 3.After login, a banking app lets you view your own account balance but prevents you from transferring money from other people's accounts.