Authorization is the process of determining whether a user, program or device is allowed to access a protected resource in a particular way. Authorization is a key theme in computer security practices.

learn more… | top users | synonyms

21
votes
3answers
2k views

Pitfalls of using OAuth for mobile Applications

OAuth seems to be getting a lot of traction at the moment as an authorization solution for web applications and mobile applications. I'm interested in understanding what the pitfalls of using OAuth ...
23
votes
1answer
14k views

What is the difference between RBAC and DAC/ACL?

What are the benefits of each, and when should I choose one over the other? Are there situations where these should be merged? Do you have examples of common usages? And what about MAC, where ...