AuthN vs AuthZ

from here (source article)

there's kind of a big difference between proving who you are and establishing what you can do, and if people can't tell the difference it goes a long way to explaining why security is in such a sad state.