Re: Roles - Access Rule Storage

Are you talking about the roles that are applied to the user who is
authenticated, or are you talking about the authorization policy that is
applied to any given URL in terms of who can access it?

If you want to make the latter dynamic, you can just code this in your pages
directly or write your own HTTP Module that does it. If you look at the
UrlAuthorizationModule (use Reflector to see the code), you can see how it
reads in the authorization configuration applied to the current URL path and
then decides whether the current user has access or not. You could do the
exact same thing in your module, but store the authorization policy in the
database instead and look it up by URL or something. After that, applying
the policy and doing the proper responses is easy and something you could
basically copy from Microsoft's code.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Matt" <mdframe@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:uZRFch$uGHA.1956@xxxxxxxxxxxxxxxxxxxxxxx
Can anyone tell me if is is possible to override how a web application
stores/retrieves the Access Rules for roles? Instead of using the
web.config to store the following:

<system.web>
<authorization>
<allow roles="Admin" />
</authorization>
</system.web>

I would like to store this information in a database table and have the
system pull the access role from the table when needed.

Thanks,

Matt


.

Relevant Pages

  • RE: Azman Security Questions
    ... In AzMan Authorization Policy is loaded into the memory of the app using the ... If the policy store ... If it's a remote xml store AzMan best practices are ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to run as in a deamon
    ... Have them set up the scheduled task to run as the required user. ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... Do we need to get their uname/pw and store it to be able to runAs them - ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Password Reset Self Service
    ... where will you store the answers? ... Creating a web page that does the password reset is quite easy. ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to iew Passwords?
    ... It actually doesn't even store them directly, it stores a one way hash, so ... the third party password sync apps like psynch or MIIS. ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: Roles - Access Rule Storage
    ... You might also want to look at the Authorization Manager API if you ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... exact same thing in your module, but store the authorization policy in the ...
    (microsoft.public.dotnet.framework.aspnet.security)