Auhtentication vs authorization

[deepakqlikview_123]

Hello All,

What is authentication and authorization in qlikview and what will come first authentication on authorization.

Thanks,

Deepak

[#2]

Authentication verifies who you are. For example, you can login into your Unix server using the ssh client, or access your email server using the POP3 and SMTP client

Authorization verifies what you are authorized to do. For example, you are allowed to login into your Unix server via ssh client, but you are not authorized to browser /data2 or any other file system

Authorization occurs after successful authentication.

Example: Authentication And Authorization

A user called vivek is allowed to login to www.cyberciti.biz server securely using the OpenSSH ssh client/server module. In this example authentication is the mechanism whereby system running at www.cyberciti.biz may securely identify user vivek. The authentication systems provide an answers to the questions:

• Who is the user vivek?
• Is the user vivek really who he represents himself to be?

vivek is Authenticated? What Next?

Authorization.

The Unix server running at www.cyberciti.biz determines what level of access a particular authenticated user called vivek should have. For example, vivek can compile programs using GNU gcc compilers but not allowed to upload or download files. So

1. Is user vivek authorized to access resource called ABC?
2. Is user vivek authorized to perform operation XYZ?
3. Is user vivek authorized to perform operation P on resource R?
4. Is user vivek authorized to download or upload files?
5. Is user vivek authorized to apply patches to the Unix systems?
6. Is user vivek authorized to make backups?

[sujeetsingh]

Nuthan has done that in best way .

[deepakqlikview_123]

Hello All,

Thanks for reply.

This mean authorization comes first is it.

Thanks

[#5 · Accepted solution]

No Deepak,

Authorization occurs after successful authentication.

Authentication comes first.