Yes, I would agree with these broad categorizations. And would like to
keep it broad for the purposes of any explorations of IDS directions and
ideas.
Sound like we've got the first entries in the definitions section of
whatever document comes out of this....
Joe
From: ids-bounces at pwg.org [mailto:ids-bounces at pwg.org] On Behalf Of
Petrie, Glen
Sent: Tuesday, April 13, 2010 3:53 PM
To: ids at pwg.org
Subject: [IDS] Question on Athen, Author Righs
All,
In the face-to-face meeting there was a discussion about the following
three areas
Authentication
Authorization
Rights
During the discussion, it was stated that Authorization and Rights are
the same thing. I thought the terms had slightly different meaning;
more precisely different meaning depending on context; that is,
Authentication refers to "are you who you say you are". Applies to
users mostly but also applies to devices.
Authorization refers to "you are allowed to do and/or use this equipment
and these capabilities, etc. Applies to a user in reference to a
device.
--- User A is authorized to print on printer A, in color,
Monday-to-Friday.
Rights, more specifically, Digital Rights refers to "you are allowed to
do and/or use this content (document) and how. Applies to a user in
reference to a document.
--- User A has the rights to view this document only.
Are these broad distinctions basically correct; so that Authorization
should not be construed to be Rights.
Glen
--
This message has been scanned for viruses and
dangerous content by MailScanner <http://www.mailscanner.info/> , and is
believed to be clean.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pwg.org/pipermail/ids/attachments/20100413/957710bb/attachment-0001.html>