is distinct from : means getting sure that a user is the person he or she claims to be whereas takes place once a user is authenticated and requires access to some part of the system: a file for a filesystem, an administration panel on a webpage, sending mails on a mail server, etc.

is both about policy (who should be given access to what, under which circumstances and conditions) and mechanisms (how to enforce the policy, how to grant or deny access).

history | show excerpt | excerpt history