---
title: "Discussion on \"A feature flag is not an authorization check\" | Hashnode"
description: "Discussion on \"A feature flag is not an authorization check\". Feature flags are great for rollouts. They are a poor substitute for authorization.\nA flag answers: “Is this code path on for this cohort?”\nAn authz check answers: “Is this principal allowed to do thi"
url: "https://hashnode.com/posts/a-feature-flag-is-not-an-authorization-check/6aafc21f2244be625326edad"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [A feature flag is not an authorization check](https://authbyexample.hashnode.dev/a-feature-flag-is-not-an-authorization-check?utm_source=hashnode&utm_medium=feed)

Feature flags are great for rollouts. They are a poor substitute for authorization. A flag answers: “Is this code path on for this cohort?” An authz check answers: “Is this principal allowed to do thi

Sep 20 · 1 min read · authbyexample.hashnode.dev  
Read the article

-   [#authorization](https://hashnode.com/tag/authorization)
-   [#security](https://hashnode.com/tag/security)
-   [#access-control](https://hashnode.com/tag/access-control)
-   [#feature-flags](https://hashnode.com/tag/feature-flags)

## Written by

[Auth By Example](https://hashnode.com/@authbyexample)

@authbyexample

  
[View profile](https://hashnode.com/@authbyexample)

Practical lessons on auth, authorization, and access control.

Practical lessons on auth, authorization, and access control.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.