Re: Security at an object instance

From: Adam (adam@nospam.com)
Date: 02/19/03

  • Next message: Magik: "No Valid Signature Found" 
    From: "Adam" <adam@nospam.com>
Date: Tue, 18 Feb 2003 23:21:14 -0000

    Yes, that does look interesting! I'll read up on it tomorrow :) Thx for the
    pointer!

    "Joe Kaplan" <ilearnedthisthehardway@noway.com> wrote in message
    news:eIaxVfw1CHA.1424@TK2MSFTNGP12...
    > This sounds like the kind of thing you would do with imperative security
    > checks instead of declarative checks with attributes, but the idea would
    be
    > the same. You would just use conditional statements that would check
    roles
    > on the current thread's principal and include conditions on some state
    > values in your object instances that are meaningful.
    >
    > Joe K.
    >
    > "Adam" <adam@nospam.com> wrote in message
    > news:e6at$6s1CHA.2204@TK2MSFTNGP09...
    > > I'm looking for advice on how to apply access security for an instance
    of
    > an
    > > object.
    > >
    > > Using roles I can define that a user has the rights to perform a certain
    > > action on all objects of a known type (say "open" on a "results
    object").
    > > However, I'd like to restrict access to some of the "results objects" to
    > > specific users (i.e. an application admin configures a few as accessible
    > > only to a certain user).
    > >
    > > Any ideas/resources on how to do this in .NET (C#).
    > >
    > > Thanks, Adam
    > >
    > >
    >
    >