authentication 认证, authorization 授权, access control 访问控制
These three mechanisms are distinctly different but usually used in combination with a focus on access control for granularity in assigning rights to specific objects and users.
Generally, access control is defined in three ways:
- Mandatory Access Control (MAC) 自主存取控制
- Discretionary Access Control (DAC) 强制存取控制
- Role Based Access Control (RBAC) 基于角色的存取控制
Grant
Revoke
Role
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
A right is something you are born with, and you will die with, granted to you by your “Creator”.
A privilege is granted to you by the King, General, Church, or the State, and may be revoked at any time, if one loses favour.
This is usually caused by a failure “consider the king”, a failure to pay the “royalty”, tax, indulgence, tithe, license fee, etc.
So-called “Civil Rights” are by definition, conveyed by positive law, and thus are more akin to privileges than to natural rights.
So-called “Civil Liberties” are by definition natural immunities to government interference, and are thus are more akin to proper natural rights. Rights exist before, and are thus superior to, privileges.