AuthN vs AuthZ

Name: Cynarks
Address: Madhapur, Ayyappa Society, Hyderabad, Telangana, 500081, IN
Telephone: +917337381478
Price range: $$

Beginner45 ptsIdentity

Objective: Separate identity from permission.

MFA checks who you are. Checking if you may delete a user is:

Runs entirely in your browser. No Wireshark, Burp, Docker, or cloud accounts required. External academies (PortSwigger / TryHackMe) are optional next steps in the Academy library.

Challenge workspace

Hint

AuthZ = permission.

Explanation

AuthN identity; AuthZ permission.