Security · Website glossary

Authorization

Quick answer · What is Authorization?

The decision about which actions or resources an identity is allowed to access.

IN PRACTICE

Authorization: an example

An authenticated editor may publish posts but be denied permission to install plugins.

KEEP IN MIND

Hiding a button is not sufficient authorization; the receiving system must enforce access rules.

Put the idea to work

Frequently asked questions

What is a practical example of Authorization?

An authenticated editor may publish posts but be denied permission to install plugins.

Is hiding a button sufficient to enforce authorization?

Hiding a button is not sufficient authorization; the receiving system must enforce access rules.

Which concepts should I read alongside Authorization?

Authentication: The process of checking that a person or system is who or what it claims to be.
Least privilege: The principle of granting only the access needed for a person's or system's current task.