railstutorial/sample_app — pull request #5 by cyberbob (2011-11-13 22:23:17+00:00)
Title: authenticate -> authorize

Hello, You incorrectly named method for checking privilege. See below:

From Wikipedia(http://en.wikipedia.org/wiki/Authentication): "The process of authorization is sometimes mistakenly thought to be the same as authentication; many widely adopted standard security protocols, obligatory regulations, and even statutes make this error. However, authentication is the process of verifying a claim made by a subject that it should be allowed to act on behalf of a given principal (person, computer, process, etc.). Authorization, on the other hand, involves verifying that an authenticated subject has permission to perform certain operations or access specific resources. Authentication, therefore, must precede authorization."