Permission vs Authorization

Fleeting

Authorization refers to the process that determines what a user is able to do.

— https://docs.nestjs.com/security/authorization

They thought that authorization was worth having a definition, but not permission, that they use later in the document anyway.

instead of checking for specific roles, you should compare permissions

— https://docs.nestjs.com/security/authorization

Notes linking here

• misconceptions

Permalink