Re: Integrate AzMan with SQL Database?

Unfortunately, whereas that URL leads to a reasonably good article on
row-level security, it is a simplistic approach that does not
implement any of the flexibility nor administrative features that
AzMan (nor Active Directory, for that matter) provides. I know how to
add a user name to each row, etc., but that does not provide a
hierarchical (e.g. AD groups) nor role-based (as per AzMan) system.
Whereas I could extend it to do that, I'm sure I'm not the first to be
faced with this, and I'd prefer not to reinvent the wheel!

Brad.

On Wed, 20 Aug 2008 08:30:46 +0300, "Uri Dimant" <urid@xxxxxxxxxxx>
wrote:

http://vyaskn.tripod.com/sql_server_security_best_practices.htm --------security
best practices





"Bradley Plett" <plettb@xxxxxxxxxxxxxxxx> wrote in message
news:1dsla413ljmb5p92qvib5vl0qddar5ha13@xxxxxxxxxx
I don't know if this is the right newsgroup for this, but....

We need to secure records in a table based on Active Directory
permissions. Can someone point me to a good resource (with examples)
of how to go about this? Here is some pseudo-code of what I'd like to
be able to do:

select * from mytable where UserIsAllowed("Brad")

In this example, the "UserIsAllowed" function tests each record,
presumably using AzMan, checking both the user and the groups the user
belongs to.

Any help would be appreciated. Thanks!

Brad.

.

Relevant Pages

  • Re: security descriptor
    ... Probably will revisit AzMan too simultaneously. ... Could you explain the steps to create the extendedRight object, ... and to add the schemaIDGuid of the various class/es. ... It actually offers more flexibility in ...
    (microsoft.public.windows.server.active_directory)
  • Re: authorization for c# winforms applications
    ... AzMan isn't an option as not all of the users of our ... system will be in our active directory and it appears that AzMan doesn't ... MSDN magazine that involved using MS Authorization Manager AKA: ... If you have a basic solution that you have used in the past that worked ...
    (microsoft.public.dotnet.languages.csharp)