From the course: Writing Secure Code in iOS by Infosec

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Authorization

Authorization

From the course: Writing Secure Code in iOS by Infosec

Start my 1-month free trial Buy for my team

Authorization

“

- Now let's talk about authorization. You've authenticated your users. Now what are you going to let them do? What is access control? This is something that you should require in every app if the app has different kinds of users, or login functionalities, which would prevent non-users from accessing resources, like you have to log in before you can see something. It has, of course, two primary components. Authentication, proving who you are, and authorization, getting permission to do something after you have already successfully authenticated. An access control list, or ACL, is the most common implementation of access control. It's usually a list of permissions that are attached to an object. And typically, it's done as a table or a matrix that matches up users or groups to their assigned privileges. So some people can read, some people can write, some people can't do anything, some people can do everything. Some people have all privileges. And that is up to you, the designer and the…

Contents