Re: Security at an object instance

From: Joe Kaplan (ilearnedthisthehardway@noway.com)
Date: 02/18/03 

From: "Joe Kaplan" <ilearnedthisthehardway@noway.com>
Date: Mon, 17 Feb 2003 22:40:40 -0600

This sounds like the kind of thing you would do with imperative security
checks instead of declarative checks with attributes, but the idea would be
the same. You would just use conditional statements that would check roles
on the current thread's principal and include conditions on some state
values in your object instances that are meaningful.

Joe K.

"Adam" <adam@nospam.com> wrote in message
news:e6at$6s1CHA.2204@TK2MSFTNGP09...
> I'm looking for advice on how to apply access security for an instance of
an
> object.
>
> Using roles I can define that a user has the rights to perform a certain
> action on all objects of a known type (say "open" on a "results object").
> However, I'd like to restrict access to some of the "results objects" to
> specific users (i.e. an application admin configures a few as accessible
> only to a certain user).
>
> Any ideas/resources on how to do this in .NET (C#).
>
> Thanks, Adam
>
>