What is the difference between authentication and authorization?
Authentication happens first. You verify user’s identity based on credentials. Authorization is making sure the user only gets access to the resources he has credentials for.
If you liked this question/asnwer, make sure you
Subscribe to KyaPoocha.com RSS feed!
BOOKMARK THIS : BlinkList | del.icio.us | Digg it | Furl | reddit | StumbleUpon | Yahoo MyWeb |
Related Interview Questions
We have 2 sites in which one site allows the user with out asking credentials and second one ask for credentials through a log page. What might be the configurations settings for both sites? We can use IIS and web.config files together. 11.11.08
First one using windows authentication as follows. Set Windows authentication in IIS. And in web.config For the second one. We set IIS authentic...What is the difference between login controls and Forms authentication? 29.04.07
Login controls are an easy way to implement Forms authentication without having to write any code. For example, the Login control performs the same functions yo...Between Windows Authentication and SQL Server Authentication, which one is trusted and which one is untrusted? 04.07.06
Windows Authentication is trusted because the username and password are checked with the Active Directory, the SQL Server authentication is untrusted, since SQL...What are the types of authentication in .net? 14.03.06
We have three types of authentication: . Form authenticatio . Windows authentication . Passport This has to be declared in web.config file....What are the various ways of securing a web site that could prevent from hacking etc .. ? 14.03.06
1) Authentication/Authorization 2) Encryption/Decryption 3) Maintaining web servers outside the corporate firewall. etc.,...What do you mean by authentication and authorization? 14.03.06
Authentication is the process of validating a user on the credentials (username and    password) and authorization performs after authentication. After Aut...What is form-based authentication 11.03.06
An authentication mechanism in which a Web container provides an application-specific form for logging in. This form of authentication uses Base64 encoding and...What is basic authentication 11.03.06
An authentication mechanism in which a Web server authenticates an entity via a user name and password obtained using the Web application's built-in authenticat...What is authorization constraint 11.03.06
An authorization rule that determines who is permitted to access a Web resource collection....What is authorization? 11.03.06
The process by which access to a method or resource is determined. Authorization depends on the determination of whether the principal associated with a request...