Meaning in graphics work
Authorisation decides whether an identified actor may perform a particular action on a particular resource. It applies current permissions to the actual request, rather than only to navigation.
It differs from authentication, which establishes the principal. Being signed in or owning the same brand name does not grant access to another organisation's private work.
Example and practical consequence
A revoked collaborator who still has a valid account must be denied a former client's artwork download. The check needs to happen at the file request and relevant queued operations, not merely by hiding a menu link.
Enforce object, tenant and field grants close to the protected resource and deny unsupported actions. Test reads, writes, exports, caches and background effects. Browser labels and selected roles can guide a draft, but cannot replace server-side decisions or turn a local review into an authorised production approval.
Take it to the next job
- Check the actual actor, resource, action and current grant together.
.jpg){kind=link}
