How to SELECT records based upon ASP.NET Roles
- From: "Bob" <_NO_SPAM_PLEASE_@xxxxxxxxx>
- Date: Sun, 13 Aug 2006 15:02:01 -0400
I am new to ASP.NET and need to develop an application that archives /
retrieves documents. When the document is stored, the user specifies the
document permissions ( public or limited to a specific role/class of users
..) This means that when a person in Customer Service does a search, they
aren't able to retrieve company payroll reports archived by the Finance
department.
The solution will be implemented in a site setup with NT Authentication via
a local domain that the IIS 6.0 server is a member of. The data store will
be SQL Server Express 2005 initially.
I understand that ASP.NET supports Role based security. Presently however,
it appears that ASP.NET runs under a single NT Service account.
If I attempt to use the SYSTEM_USER() or similar SQL function, will it
return the current ASP.NET authenticated browser user or the security info
for the .NET service account?
Assuming I store a role / group id with each record, is there a way to
construct a WHERE clause in a SELECT statement that identifies the Roles of
the current ASP.NET authenticated user without having to dynamically build
the SQL statement?
Thanks,
Bob
.
- Follow-Ups:
- Re: How to SELECT records based upon ASP.NET Roles
- From: Joe Kaplan \(MVP - ADSI\)
- Re: How to SELECT records based upon ASP.NET Roles
- Prev by Date: Re: password salting
- Next by Date: Strong Name Sandboxed AppDomain and GAC Problem with plugins
- Previous by thread: Re: Is e-mail from Microsoft?
- Next by thread: Re: How to SELECT records based upon ASP.NET Roles
- Index(es):
Relevant Pages
|
