Re: How to check users against security groups in Active Directory

Sure, you could definitely do that. I would probably provide some sort of
wrapper around the groups and the authorization function in general so that
you can easily change this at runtime. Microsoft has a nice, very powerful
framework for this type of thing call AzMan that you can use, or you could
implement something more simple yourself.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"rote" <naijacoder@xxxxxxxxxxx> wrote in message
news:e0Fr$5zJIHA.5980@xxxxxxxxxxxxxxxxxxxxxxx
Thanks Joe for the prompt reply. It seems you are still with Accenture.
I'll be using Windows Auth and thats true i can use User.IsInRole method.
But what 'm consideriing is how i'm going to store the AD sceurity GROUPS
i
want to validate the users against.
I would like to have
<?xml version="1.0" encoding="ISO-8859-1"?>
<ActiveDirectory>
<groups>Tove</groups>
</note></ActiveDirectory>
then using the IsinRole method i would like to loop through the groups
node to check for security groups ..Is this achievable?
Thanks in advance


"Joe Kaplan" <joseph.e.kaplan@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:OuH9hRvJIHA.4272@xxxxxxxxxxxxxxxxxxxxxxx
Depending on the authentication model your app uses, ASP.NET may already
know the user's security group membership. If you are using Windows
authentication, you can just check User.IsInRole and do things like
change the visibility of a control based on the result of that.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"
http://www.directoryprogramming.net
--
"rote" <naijacoder@xxxxxxxxxxx> wrote in message
news:uWhSVXoJIHA.4228@xxxxxxxxxxxxxxxxxxxxxxx
My sceanrio is this on an asp.net 2.0 freamework.
I want to use any of the data controls e.g Gridview,DetailView etc..
But i want some buttons e.g update,edit save etc to be enable or
disabled based on if they belong to some security groups in active
directory.
I'm looking for the best options for this because i want to store those
security groups somewhere and then check for the
user against those security groups for their authorisation when they
lunch the application.
Preferably i would like to store them in an xml file and then write an
API to change, modify or add active directory security groups.
Any ideas would be appreciated.
Thanks









.