Access Control is like setting rules or limits to decide who can and cannot do certain things or access certain files (even paths). [ Just like it is a way of managing and regulating access to different resources or paths based on specific criteria]
Get L1337XI’s stories in your inbox
Join Medium for free to get updates from this writer.
Access control is dependent on Authentication and session management.
Authentication: It is the process of verifying that the user is indeed who they claim to be.
Session Management: Identifies which subsequent HTTP requests are being made by the same user. [ Session management is like remembering which user is doing things on a website as they click around and do different stuff.
Access Control: Access Control is responsible for evaluating whether the user possesses the necessary permission to execute the specific action they are attempting within the system.
