✅
Authorization
Authentication
Access decision based on identity and policy.
Definition
Authorization evaluates access control policy using authenticated identity, roles, attributes, and context to permit or deny actions on resources.
In plain English
Access decision based on identity and policy.
Why this matters
Why it matters: Proper authorization limits privilege escalation and reduces the blast radius of compromises.
Example
Example: RBAC rules allowing “read” but denying “write” for a given role.
Apps Using Authorization
Examples of apps that implement or relate to this privacy concept