Re: General Architecture Question

if your users can authenticate against the active directory, sure, if not,
you have options. such as forms based with the roles stored in sql or
setting up another ad for your external users or utilize something like adfs

"Jon" <Jon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2F0A216C-624A-4EBA-95D1-07356FAC60A8@xxxxxxxxxxxxxxxx
Hi Consultant,

We do use AD for internal apps, but we also have a number of external
users,
so that's where the below theory would be used. Is it still valid?

Thanks,

Jon

"Consultant" wrote:

if you have active directory, you can just use global groups and use the
in
role function

"Jon" <Jon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:23145A04-8754-42E4-9FBC-743038423E1C@xxxxxxxxxxxxxxxx
Hello everyone,

Just a quick question with regard to where to hold roles for
applications.

Is it better to have a central user, application & roles database and
pass
a
user object to an application OR store the roles for each user in each
applications own database?

What are people opinion & thoughs.

Thanks,

Jon





.