Re: Anyone out there using AzMan with WinForms solution?

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 03/24/05 

Date: Thu, 24 Mar 2005 03:41:20 -0800

Hello PierreDechaine,

go for it. AzMan seems to have an interesting future in the whole EAI scenario.

AzMan is extremely powerful, and the setup steps you described are correct.
I would re-consider deploying the XML files on the client, as this makes
updates extremely difficult and - even worse exposes your Authz store to
client machines.

Have you considered storing the Authz store in AD - or a little more leightweight
in ADAM?

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> I have been using AzMan for a security proof of concept and really
> like what it has to offer. Our company has over 3500 XP user
> workstations. The new version of software that we are building and
> preparing to roll out needs some interesting security in regards to
> the user interface. Buttons can be set on or off based on all the
> different screens you happen to be viewing. I have it working and am
> thinking that I will need to get the Azroles.dll on the user machines
> and then regsvr32 the dll so that I can do the access checks against
> the defined operations in the xml policy file. Anybody out there have
> any comments or feedback on trying to implement this type of security
> model?
>
> Would love to hear back from some of the security experts out there in
> the field.
>
> Pierre Dechaine, MCSD
>

Loading