Objective 5.2: Configure and apply authorization

Authorization is the process of giving a user permission to take an action on something, such as create, read, update, or delete. In multiuser computer systems, a system administrator defines which users are allowed access to the system and what they can do. Authorization is also the process of comparing a user’s capability to interact with items in the system against the user’s request to determine whether the user should be granted that permission. The authorization system is only as granular as your design and implementation. Although ASP.NET MVC 4 enables you to handle authorization, you have to ensure that it is built into the system in an appropriate and effective manner.

The best way to manage ...

Get Exam Ref 70-486: Developing ASP.NET MVC 4 Web Applications now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.