Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP .Net Security > Application level roles + Item level roles... how to do it?

Thread Tools

Application level roles + Item level roles... how to do it?

Posts: n/a

I'm looking for samples to manage system or application level security and
item level security.

I have an intranet application where the users can create & edit some
objects like "Employees".
From the application level view, the user is authorize or not to create an
But when the user will create it, he can associate this employee to only
authorized organizationnal units.
After this, the user can edit only employees in authorized organizationnal
units, but he can view (but not edit) all other employees.

So the user has a application role and an orgnizationnal unit role, how to
combine these?

Also, I want to use an operation based access check instead-of a role based
So, I'm trying to play with the AzMan, but this not useable for a "2
dimensions" security.

Today I manage this at the application level, but today a user can edit any
employees, not only authorized one.

(employees is just a sample, I have a lot of objectsand each one as will
have more then simple edition capabilities)

I want to define specific roles for each user/orgnization combination.

I'm using ASP.NET 2.
The integrated membership SQL provider is excellent for the application
level security. But not so good for my needs.

I love AzMan to manage the operations allowed in a role... so if there is
any solution using it... I'll take it

thanks for your help.


Reply With Quote

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Re: How include a large array? Edward A. Falk C Programming 1 04-04-2013 08:07 PM
Dynamically enable menu item - (not based on roles) Nilla ASP .Net 3 05-29-2008 06:46 AM
c is a low-level language or neither low level nor high level language pabbu C Programming 8 11-07-2005 03:05 PM
Is Cisco PIX Application level firewall or Packet level firewall? Learning Cisco Cisco 3 10-15-2005 12:55 AM
Display Related Item or Add Item ssoss ASP .Net 2 09-18-2003 11:35 PM