Authorization (AuthZ)

Companion card for the Foundation course — study the related lesson for full progress.

Simple explanation

What you may do after login.

Roles, attributes, resource permissions.

Student sees own marks only; Drive ‘view’ vs ‘edit’.

After login, AuthZ stops horizontal privilege abuse (IDOR-style access).

Read invoices but not approve payments.

Identity

Policy

Allow / Deny

Authorization answers: what may you do?

Mini quiz

Seeing only your own marks after login is mainly:

Continue in the Foundation course: open lesson →