28/10/2008
Role Based Access Control
Authentication
and Authorisation
Definitions
lAuthentication is the
validation of a userid that is used by a user or batch
process
lAuthorisation is checking that a userid is allowed
to perform certain operations on an object
can <user>
"fred" do <operation> "delete" on <object>
"/home/fred/somefile.txt" of <object_type> "file"