Intermediate
Authorization
Also: authorisation
In plain words
Checking what someone who has logged in is allowed to do.
The fuller definition
Authorization determines which actions an authenticated user or program may perform on which resources.
- Identity
Known caller
- Policy
Allowed operations
- Decision
Permit or deny
A simplified relationship, not a screenshot or a complete design.
A concrete example
A service permits reading documents from one matter but rejects deletion or access to a different matter.
The distinction that matters
An authenticated user can still be denied a particular operation.
Related terms
Where it is taught
APIs and JSON: connect a model to a small programSource and further reading
MDN · Web technology glossaryThe definition and example are written for this library. The link gives background, official documentation or legal authority as labelled. Legal scope depends on the jurisdiction and current text; product features depend on release and settings.