Authorization terminology is a mess: Let's fix it

IMHO, the most elegant method to answer this question is capability based access control. If the subject can utter the action, then it can perform it. And then delegation is the transfer of nouns and verbs to perform the utterances.

Re: Authorization terminology is a mess: Let's fix it

#5

Post by Quarrelsome » Fri, Sep 04, 2026, 9:10 AM UTC

Nice!

I'd like to fix the prior abstract. Auth and auth upsets me greatly cos we have:

Authentication & Authorization

and we call both/either auth. Hence please help me make this a thing:

AuthENTIcation & AuthORIzation : ENTI & ORI

ENTI- can you enter, ORI (or ORIZ) what can you do?

Re: Authorization terminology is a mess: Let's fix it

#6

Post by usernametaken29 » Fri, Sep 04, 2026, 9:11 AM UTC

https://xkcd.com/927

Nice work and all regardless

Re: Authorization terminology is a mess: Let's fix it

#7

Post by [deleted] » Fri, Sep 04, 2026, 9:11 AM UTC

black_knight wrote: post #4

> can this subject perform this action on this object? IMHO, the most elegant method to answer this question is capability based access control. If the subject can utter the action, then it can perform it. And then delegation is the transfer of nouns and verbs to perform the utterances.

[deleted]

Re: Authorization terminology is a mess: Let's fix it

#8

Post by andai » Fri, Sep 04, 2026, 9:12 AM UTC

Quarrelsome wrote: post #5

Nice! I'd like to fix the prior abstract. Auth and auth upsets me greatly cos we have: Authentication & Authorization and we call both/either auth. Hence please help me make this a thing: AuthENTIcation & AuthORIzation : ENTI & ORI ENTI- can you enter, ORI (or ORIZ) what can you do?

ident and perms

Re: Authorization terminology is a mess: Let's fix it

#9

Post by hobofan » Fri, Sep 04, 2026, 9:13 AM UTC

Quarrelsome wrote: post #5

Nice! I'd like to fix the prior abstract. Auth and auth upsets me greatly cos we have: Authentication & Authorization and we call both/either auth. Hence please help me make this a thing: AuthENTIcation & AuthORIzation : ENTI & ORI ENTI- can you enter, ORI (or ORIZ) what can you do?

This has already been solved well-enough with AuthN and AuthZ as distinct names.

Re: Authorization terminology is a mess: Let's fix it

#10

Post by andai » Fri, Sep 04, 2026, 9:13 AM UTC

tuberreact wrote: post #2

turns out naming is important

I'm maintaining a document called Tricksy words with multiple meanings that cause endless confusion and strife

Just in the past year I have wasted several months pulling my hair out due to incorrectly named projects.

It really does turn out naming is important!