Hi All, Inside the security constraints(in DD) tag thers is sub tag called auth_constraint ,what is auth?Is it authorization or authentication.Can any one tell me the exact difference between those two?Thanks.
posted 9 years ago
auth-constraint refers to authorization constraint.
"Authentication means by which communicating entities prove to one another that they are acting on behalf of specific identities that are authorized for access." (You are who you say you are?)
"Authorization is finding out if the person, once identified, is permitted to have the resource." (to make sure you are allowed to see certain resource)