Windows Application user group security

[Francois Stander]

Hi,
I need assistance (more of overview or architect than code). VB.net (windows application) I have to write the security module for an application based on 3 groups (integer value) of accesses. An user belongs to group (1 ,2 or 3) where a group 1 will have access to the whole system, group3 is very limited access.
Access applies to the folowing: 1) is the form vissible? 2) is all group containers on the form visible? 3) are all controls in the group container (like panels, group box ect.) visible or enabled ?. I am using a sequal database.

What i need is the approach. An approach to minimize IO - So i believe the tables must be read upfront and the data must be stored in the cache. The security module itself - to allow / deny access. the logic behind it. The application is not big. Maximum 15 forms. A form can contain multiple tabs.
I am using vb.net version 2005 and a sequal database.
Much appreciation.
Regards
Francois

[bplacker]

when a user logs in (if they are logging in), store their level of access in a global variable, and whenever you load a form, show and hide the appropriate controls based on the users access level. Does that help?

[kenobewan]

Here is a good article that may help you choose your approach:
An Overview of Authentication and Authorization Options in ASP.NET

Hope that this helps.

[nmsreddi]

hello

we hav done the similar task for user accessibility depending on the user type

maintain a key word in data base indicating the user level when ever log in just

get the permissions details also with the user name itself .just pass that key word

where ever needed either to allow or not for doing particular task.

we have done giving add permissions but not deleting for a particular user in single form or multiple forms

as your application contains only 15 forms u can easily implement this logic

regards

Nmsreddi