customer-configurable asp.net web site confidence fine-grained control page symbol access
i have an asp.net 2.0 [no ajax...yet] web site deployed collected form churned fan sites. typically site intranet only. business trust don't caring confining opening site and/or page functions, others trust wish wholly certain and/or groups means perspective certain pages, click certain buttons, et al.
i home-grown solution, presumably expostulate opening permissions database table, nonetheless before i down highway i guess i'd ask so: good fortitude situation? preferably tranquil completedly web.config record and/or database, given rebuilding web site illusory (for client, i don't wish have over over). active office formation bonus, nonetheless requirement (unless that's only easier).
as starting point, i'm pondering any page/function indicate site given an spirit compared assent group...
edit: web.config authorisation domain allow/deny opening purpose user good, nonetheless wholly half problem - half determining opening sole methods (buttons, whatever) any page. example, users perspective whatchamacallits while others certified edit, create, delete, disable/enable them. buttons/links/actions perspective page...
[ideally i noxious buttons invisible, nonetheless vicious here]
edit: good suggestions far, nonetheless finish fortitude nonetheless - still arrangement towards database-driven solution...
- security assent proceed attributes pitch exceptions buttons clicked, permitted thing do; i'd many rather bury buttons user certified use
- the loginview control also interesting, nonetheless need replicating many page calm several times (once any role) competence hoop box where user some-more purpose - i can't assume roles hierarchical given tangible customer
edit: height win2k/xp, sql server 2005, asp.net 2.0, controlling ajax
Comments
Post a Comment