Authorization is the process of granting or restricting access to resources based on a user᧙s permissions. It determines what a user is allowed to do after they have been identified.
퇽훹 Authentication vs Authorization
- Authentication ᭒ Verifies who you are (login with username/password)
- Authorization ᭒ Determines what you can access (permissions, roles)
퇽훹 How Authorization Works
- User logs in (authentication)
- System checks user role/permissions
- Access is granted or denied based on rules
퇽훹 Types of Authorization
- Role-Based Access Control (RBAC)
Access based on roles (Admin, User, Manager) - Attribute-Based Access Control (ABAC)
Access based on attributes (location, time, device) - Policy-Based Access Control
Uses defined policies and rules
퇽훹 Examples
- Admin can add/delete users
- Employee can view reports only
- Student can access course materials
퇽훹 Importance of Authorization
- Protects sensitive data
- Prevents unauthorized access
- Ensures security and privacy
- Maintains system integrity
- Supports compliance with regulations
퇽훹 In Build & Release Management
Authorization controls:
- Who can trigger builds
- Who can approve releases
- Who can deploy to production
Conclusion
Authorization ensures that users have the right level of access, making systems secure, controlled, and well-managed.
