Access control - overview

Access control relates to restricting access to the application, and it's features, including data.

We can break it down into two sections:

• Authentication : Verifying a user's identity
• Authorization : Verifying a user has access to a feature, or data, served up by the application