28/10/2008
Role Based Access Control
4
Authentication
and Authorisation
Definitions
Definitions
lAuthentication is the
validation of a userid that is used by a user or batch
process
lAuthorisation is checking that a userid is allowed
to perform certain operations on an object
can <user> "fred" do <operation> "delete" on <object> "/home/fred/somefile.txt" of <object_type> "file"
can <user> "fred" do <operation> "delete" on <object> "/home/fred/somefile.txt" of <object_type> "file"