In the previous section, we discussed how to avoid unattended access to a particular or restricted screen/page. We have seen that Login actually authenticates the user and allows them to make a request to the system. On the other hand, authentication does not mean that if a user is authenticated, then they are authorized to access a particular section, page, or screen.
The following depicts a typical authorization and authentication process:
In this process, the first request/user gets authenticated (typically, it is a login form), then a request is authorized to perform a particular/requested operation(s). There may ...
