In addition to what the neighbor comment says about authorization, an ACL is an ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		aasasd on June 8, 2019 \| parent \| context \| favorite \| on: Zanzibar: Consistent, Global Authorization System In addition to what the neighbor comment says about authorization, an ACL is an internal service: it provides an “if (the user is allowed to X) then ...” to the business logic code. It's not a user-facing service.

alexeldeib on June 9, 2019 [–]

I did assume this system handled authn as well as authz, which was a mistake.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact