Authentication vs Authorization: What's the Difference?
You walk up to a nightclub. The bouncer checks your ID. That's authentication. Once inside, your VIP wristband gets you into the back room. That's authorization. Most security bugs happen because developers confuse the two.
read article