What is Authorization?

Authorization is the mechanism which grants or denies access to a network resource and allows user access to various resources based on the identity of the user. It determines access levels or privileges of user/client related to services, files, computer programs, data and application features etc.

Web security systems work on a two-step method:

  • Authentication which ensures identity of the user
  • Authorization which gives permission to the user to access various resources based on the user’s identity.

Modern-day Operating Systems have effective authorization processes to facilitate application deployment and management. Furthermore, access to computer systems depends on access policies and is spread over two phases, namely:

  • Policy definition phase where access is authorized.
  • Policy enforcement phase where requests to access are allowed or denied.

Authorization is implemented by the Security Server which has controlled access at the level of individual files and programs.

Topics: , ,