From the course: ASP.NET MVC 5 Identity: Authentication and Authorization

Unlock the full course today

Join today to access over 22,500 courses taught by industry experts or purchase this course individually.

Understand authorization and authorization types

Understand authorization and authorization types

From the course: ASP.NET MVC 5 Identity: Authentication and Authorization

Start my 1-month free trial

Understand authorization and authorization types

- [Instructor] So far we have seen that for a user to be able to use an application he needs to be authenticated, but different users have different accessing rights. Imagine an application built for university. Of course, everybody that works or studies in the university has access to the application and can be authenticated as well, but of course not everybody can see what everybody else sees. For instance, a student can see only the data related to his or her profile. A student can see the results, invoices, classes, et cetera. A professor, however, can see more information than a student. They can see all the results of all students that have taken their class, or even the professor meeting dates, but still their access is restricted to their own profiles. So, for example, they cannot see other teachers related data. On the other hand, we have the dean of the university that has access to almost everything. Let us say, for example, they can modify, delete, or create a new…

Contents