Application sser rights management

[Versteijn]

Hello all,

I'm in search for a nice user rights management framework. I want to
be able to check if the current user has the right to perform a
specific action, like: create a new user.

Something like:

if(!User("Jacque").HasRightsFor("createuser"))
{
throw new ApplicationException("User Jacque does not have rights to
create a new user.");
}

Is there some work like this? Any ideas are welcome.

Regards,

Freek Versteijn

[John M Deal]

Well there are a couple of things that come to mind here. If your
requirements aren't too granular and you are able to use it there is
Windows based roles (i.e. Groups and/or Active Directory). Baring that
you could look into Authorization Manager (AzMan) on Microsoft's website
to see how it deals with this. It allows you to do very granular
checking of authorization checks and doesn't require as much (any)
involvement of a systems administrator. There are whitepapers and
webcasts available for this. Also as a secondary item, you could take a
look at Active Directory Application Mode (ADAM) for "light weight"
authentication if you need it.

Have A Better One!

John M Deal, MCP
Necessity Software

Versteijn wrote:

Hello all,

I'm in search for a nice user rights management framework. I want to
be able to check if the current user has the right to perform a
specific action, like: create a new user.

Something like:

if(!User("Jacque").HasRightsFor("createuser"))
{
throw new ApplicationException("User Jacque does not have rights to
create a new user.");
}

Is there some work like this? Any ideas are welcome.

Regards,

Freek Versteijn