• Authorization is finding out if the person once identified, is permitted to have the resource.

• Authorization explains that what you can do and is handled through the DBMS unless external security procedures are available.

• This is usually determined by finding out if that person is a part …