Re: role based security
- From: Dominick Baier <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 29 Dec 2006 12:40:12 +0000 (UTC)
it fires on every request like every pipeline event.
if you want to optimizie role handling then you can cache the roles in the forms authentication ticket - this is a popular approach and should be google'able.
-----
Dominick Baier (http://www.leastprivilege.com)
Yes authenticateRequest works fine but it fires a little bit too
often. I am looking for something better.
"Dominick Baier" wrote:
Then search for a module that handles the AuthenticateRequest event
(or global.asax)
- i guess somewhere users are put into custom roles
-----
Dominick Baier (http://www.leastprivilege.com)
Active directory is very seldom used on a web server and I am not
using it either.
"Patrick.O.Ige" wrote:
Well Arne it would be the best to ask your Network Admin whether
there is a
GROUP or Role in Active Directory called
price list. Or maybe you have a BUILT IN roles in your windows
system.
Patrick
** if yes then the code you posted is checking whether the user
logged in
belongs to that ROLE
"Arne Garvander" <ArneGarvander@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:D1693BDF-2910-4824-A92F-D248D19033BE@xxxxxxxxxxxxxxxx
I inherited an Asp.net 1.1 web app with the following line if
(Page.User.IsInRole("price list")) ...
How do I get anyone in to a role?
Does it have anything to do with Windows security?
--
Arne Garvander
(I program VB.Net for fun and C# to get paid.)
.
- Prev by Date: Re: role based security
- Next by Date: Asp.net 2.0 Login Controls that Authenticate NetworkUserName & NetworkPassword
- Previous by thread: Re: role based security
- Next by thread: Asp.net 2.0 Login Controls that Authenticate NetworkUserName & NetworkPassword
- Index(es):
Relevant Pages
|
|