WEBVTT

00:00:00.000 --> 00:00:06.000
Does signing in mean someone can change every setting?

00:00:06.000 --> 00:00:13.000
Checking identity and granting permissions are different jobs.

00:00:13.000 --> 00:00:18.000
Separate the two access questions.
6 useful distinctions.

00:00:18.000 --> 00:00:30.000
Authentication checks identity
A sign-in process verifies the identity being presented.
Account identity · Sign-in evidence · Authentication check

00:00:30.000 --> 00:00:42.000
Authorisation checks permission
The system decides whether that account may perform an action.
Requested action · Account permissions · Allow or deny

00:00:42.000 --> 00:00:54.000
An editor may edit content
A content role need not include billing or account administration.
Page editing · Defined role · Limited permissions

00:00:54.000 --> 00:01:06.000
An admin has broader powers
Grant administrative access only when the work requires it.
User management · System settings · Higher-impact changes

00:01:06.000 --> 00:01:18.000
Hiding a button is not enough
The service must enforce the permission when the action is requested.
Server-side check · Protected operation · Denied unauthorised action

00:01:18.000 --> 00:01:30.000
Review both parts of access
Strong sign-in protection and appropriate permissions work together.
Protected sign-in · Suitable role · Regular access review

00:01:30.000 --> 00:01:39.000
Your checklist
Authentication checks identity · Authorisation checks permission · An editor may edit content · An admin has broader powers · Hiding a button is not enough · Review both parts of access

00:01:39.000 --> 00:01:47.000
Check identity and limit the actions each account can take.
jerseyweb.je