Binary Authorization Decision
A Binary Authorization Decision is a direct permit-or-deny answer to a specific access question.
Definition
A Binary Authorization Decision is the simplest form of authorization outcome. The request asks whether a given subject may perform a given action on a given resource in a given context, and the decision engine returns a bounded answer such as permit or deny.
Why it matters
Binary decisions are the most common and efficient authorization pattern, suitable for most runtime access control scenarios.
The Ariovis perspective
Authorization policies should be separated from application code when consistency, auditability or scale require it. Enforcement remains close to the resource while the decision is governed independently.
Related services
Common pitfalls
- Binary decisions alone may not provide enough context for proper enforcement, such as obligations, advice, or filtered results.
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.