Whats is Authorisation? Best explanation in 5 mins
Authorization
Authorisation is a process to provide access/approval or consent for usage of certain resource.
It follows after authentication and applies to only secured or protected resources.
End USER
User tries to access application or resource
User will be challenged for login/authentication.
Credential submitted to resource and in a good scenario login success will result with successful authentication.
Resource / Application
Now once user successfully authenticated this is the time for authorisation.
For example - An employee will not have access to approve time report, however a manager will have access. This is where application will check for role and based on role for one user it will allow time report approval and another not.
Resource Owner