I'm looking to protect some pages using the Membership provider (ADS)
built into .NET 2.0. In order to protect these pages, whose details are
stored inside a SQL Server table with columns id,name,url,par entid etc.
I need to link them into some roles, or groups.
So only certain groups from our Active Directory can access certain
pages. The problem I'm facing is that ASP.NET 2.0 seems to restrict you
to using its Role provider model only.
This provider is great if you don't already have the groups of users
setup (or users inside certain roles). But I don't want the groups (or
Roles) stored in two places, I want to be able to assign page access to
certain groups from our Active Directory.
This is what I'm reading: http://msdn2.microsoft.com/en-us/library/5k850zwb.aspx
Will I have to write my own implementation of RoleProvider for this?
Also, is there a provider that already exists for tying together page
access to roles/groups?
Most importantly, I want to be able to specify certain users as having
edit rights, whilst others only have view rights to different pages. I
was hoping to achieve this without writing my own system but
implementing a built-in provider in .NET 2 6 1486
I forgot to mention that I've looked at WindowsTokenRol eProvider. This
works great for looking up if a user is part of a group. However I was
looking for managing roles for the groups. e.g. Edit role, View role,
Delete role
On 6 Mar 2006 02:06:31 -0800, Chris wrote: I forgot to mention that I've looked at WindowsTokenRol eProvider. This works great for looking up if a user is part of a group. However I was looking for managing roles for the groups. e.g. Edit role, View role, Delete role
It sounds like you want AzMan, or authorization manager. ASP.NET includes
an AzMan role provider, and then you would use the activedirectory
membership provider.
AzMan allows you to specify complex operations, tasks, and groups. This
way, you can say Members with the "can edit foozles" operation can enable
that button (though this requires a little bit of work to make work right).
AzMan comes with Windows 2003, and you can install it in XP or Windows 2000
by downloading it.
Erik Funkenbusch wrote: On 6 Mar 2006 02:06:31 -0800, Chris wrote:
I forgot to mention that I've looked at WindowsTokenRol eProvider. This works great for looking up if a user is part of a group. However I was looking for managing roles for the groups. e.g. Edit role, View role, Delete role
It sounds like you want AzMan, or authorization manager. ASP.NET includes an AzMan role provider, and then you would use the activedirectory membership provider.
AzMan allows you to specify complex operations, tasks, and groups. This way, you can say Members with the "can edit foozles" operation can enable that button (though this requires a little bit of work to make work right).
AzMan comes with Windows 2003, and you can install it in XP or Windows 2000 by downloading it.
It doesn't seem to be available unless your AD is 2003.
On 22 Mar 2006 11:46:40 -0800, ne***********@g mail.com wrote: Erik Funkenbusch wrote: On 6 Mar 2006 02:06:31 -0800, Chris wrote:
I forgot to mention that I've looked at WindowsTokenRol eProvider. This works great for looking up if a user is part of a group. However I was looking for managing roles for the groups. e.g. Edit role, View role, Delete role
It sounds like you want AzMan, or authorization manager. ASP.NET includes an AzMan role provider, and then you would use the activedirectory membership provider.
AzMan allows you to specify complex operations, tasks, and groups. This way, you can say Members with the "can edit foozles" operation can enable that button (though this requires a little bit of work to make work right).
AzMan comes with Windows 2003, and you can install it in XP or Windows 2000 by downloading it.
It doesn't seem to be available unless your AD is 2003.
That's true, however you could always use ADAM and syncronize your Win2000
AD with ADAM
Actually, you can store AzMan in an XML file (in addition to ADAM and AD.)
Check out: http://technet2.microsoft.com/Window...cd0b61033.mspx
---
HTH
-Dave
---
This posting is provided "As Is" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm
"Erik Funkenbusch" wrote: On 22 Mar 2006 11:46:40 -0800, ne***********@g mail.com wrote:
Erik Funkenbusch wrote: On 6 Mar 2006 02:06:31 -0800, Chris wrote:
I forgot to mention that I've looked at WindowsTokenRol eProvider. This works great for looking up if a user is part of a group. However I was looking for managing roles for the groups. e.g. Edit role, View role, Delete role
It sounds like you want AzMan, or authorization manager. ASP.NET includes an AzMan role provider, and then you would use the activedirectory membership provider.
AzMan allows you to specify complex operations, tasks, and groups. This way, you can say Members with the "can edit foozles" operation can enable that button (though this requires a little bit of work to make work right).
AzMan comes with Windows 2003, and you can install it in XP or Windows 2000 by downloading it.
It doesn't seem to be available unless your AD is 2003.
That's true, however you could always use ADAM and syncronize your Win2000 AD with ADAM
On Mon, 27 Mar 2006 13:52:01 -0800, Dave McPherson [MSFT] wrote: Actually, you can store AzMan in an XML file (in addition to ADAM and AD.)
Hmm.. I thought the AD integration dependancy on 2003 level was related to
using AD as your user source, not simply storing it in AD. Or am I wrong
on that? This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics |
by: Marty Underwood |
last post by:
Okay the subject line explains a scenario I just had to tackle but I am
looking for a better way.
The current way:
1) Use forms authentication.
2) Query Active Directory and bind to a user object if no exception create
custom authentication ticket.
3) But I also needed Role based security within the app. So I used SQL
server 2k DTS package to get the members of the AD group and then created a
|
by: Francis Reed |
last post by:
Hi
I haven a question concerning roles and membership in asp.net 2.0. I work
for an online university, and we would like to implement role based security
for our portal. Currently our university has 11 courses, which fall in 5
semesters, and each course is then subdivived into approx 5 or more
groups, and in each group we have teachers, students, teacherAssistants. A
quick calculation can approximate that we have to create about 825...
|
by: Mike Hofer |
last post by:
BACKGROUND: We've designed a Website for a client that will be
deployed across multiple physical locations. The site will be hosted
from a corporate NOC, and administered by the IT group there.
The site's end-users tend to fill each others' roles on a pretty
frequent basis. Their permissions in the system have to be extremely
flexible. We initially wanted to use role-based security, defining
concrete roles, but when we realized how these...
|
by: Andy |
last post by:
Hi,
I currently have my application setup and built using Windows
Authentication (WindowsPrincipal). For security checks, I simply do
an IsInRole call on the Principal. The role permissions are hard-
coded, something like this:
private static string allowedReadRoles = new string { "Sales",
"Ordering" };
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
| |
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
|
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
| |
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
|
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |