I recently picked up this piece from Evan Williams of Blogger and Twitter fame. Williams takes a different approach to that of the traditionally perceived access management flow where authentication establishes who you are and authorisation establishes what you are allowed to access. In the blog, Williams assigns the ‘permission’ aspect directly to authentication and … Read more