I am working on a web based application in which all "roles" are stored in
the database. When a user logs in their roles are then transferred to a
comma delemited string, saved to a cookie, etc...
On one method I have the following
<PrincipalPermi ssion(SecurityA ction.Demand, Authenticated:= True,
Role:="managePr ospects")> _
Public Sub Add(prospect As MarketingProspe ct)
In rare cases we have found there my be an issue adding data so we have
built a check that if data does not exist to add the default values for the
corresponding database table. Being that in 99.9% of the cases users must be
authenticated and be in the manageProspects role. Below is how we populate
the class and the data when a rare event occurs.
If dt.Rows.Count = 0 Then
Dim trk As New Tracking(Nothin g, Nothing, Nothing, Nothing, Nothing,
StatusType.Stat usTypes.Prospec t)
trk.Add(prospec t)
Return trk
Else......
Can I impersonate the manageProspects role when I call trk.Add(prospec t)
above? This way the Declarative checks will not apply if the user does not
have permission in this case. This would be the only situation in which they
would need permission granted to them and for only this one call.
Thanks for any help...
