Authorization grants an entity--such as a user or process--permission to make use of a particular service and determines exactly what the entity is permitted to do with that service. For example, Authorization Services is used to determine whether a specific user should be allowed to change a system preference. Developers can use authorization programming interfaces to control access to services provided by their applications. Both Objective-C and procedural C interfaces are provided.
QA1277: Discusses AuthorizationCopyRights and the relationship between Authorization Services, authorization sessions, Security Server, credentials, and the credentials cache.
2003-08-06
Be careful when using AuthorizationCreate
(HTML)()
QA1172: Explains why you should avoid determining allowable rights when creating an AuthorizationRef.
2002-09-20
Stay away from custom Authorization dialogs
(HTML)()
QA1199: Explains why you shouldn't create a custom authorization dialog.