Java身份验证和授权

Question

Can anyone comment on this scenario belong to authentication or authorization

Authentication : User is logging with username & password - called authentication.

Authorization : User has some role - called authorization.

If I have only username and user Id and want to check from DB what it called ? Authorization or Authentication ?

Could anyone comment on this ?

Thanks

Answer 1

Authentication is the check if someone is the person he/she says he/she is (eg by asking for a password ). Authorization is the check if someone has the right to do something.

So in your case that database isn't able to check authentication. If the information about what the user is allowed to do can be extracted from the data within the database then this'd be authorization .