Basic question from a novice:

What is the difference between authentication and authorization?

link|improve this question
feedback

4 Answers

up vote 14 down vote accepted

Authentication is the process of verifying who you are. Logging on to a PC with a username and password is authentication.

Authorization is the process of verifying that you have access to something. Gaining access to a resource (e.g. directory on a hard disk) because the permissions configured on it allow you access is authorization.

link|improve this answer
1  
To further clarify Authorization, read en.wikipedia.org/wiki/AAA_protocol#Authorization as much of CS uses the AAA definition of Authorization which basically means Access Control. – chankster Aug 21 '09 at 11:02
feedback

Authentication is about who somebody is.

Authorisation is about what they're allowed to do.

link|improve this answer
feedback

Authentication: I am an employee of the company. Here is my ID badge.

Authorization: As an employee of the company, I am allowed entrance into the building.

link|improve this answer
feedback

Authentication is the process of determining whether someone or something is, in fact, who or what it is declared to be. In private and public computer networks (including the Internet), authentication is commonly done through the use of logon passwords.
Authorization is the function of specifying access rights to resources, which is related to information security and computer security in general and to access control in particular.
For more information please see wikipedia

link|improve this answer
feedback

Your Answer

 
or
required, but never shown