5. Introduction to Authorization

There are different types of access control:

  1. Vertical Access Control - controls that restrict access to functionality to specific users.

    ExampleOn a e-commerce website customers are prohibited to edit a product on the product page.

  2. Horizontal Access Control - controls that a restrict users to modify other same-level users details

  3. Context Dependent Access Control - controls that restrict actions based on a state of a web application

    ExampleOn an e-commerce website if the cart is empty then the customer cannot submit the order.