New Posts New Posts RSS Feed: [DEFERRED] Authentication Information
  FAQ FAQ  Forum Search   Calendar   Register Register  Login Login

[DEFERRED] Authentication Information
 Post Reply Post Reply
Author
  Share Topic Share Topic  Topic Search Topic Search  Topic Options Topic Options
Linguinut View Drop Down
Senior Member
Senior Member
Avatar

Joined: 14-Jun-2007
Location: United States
Posts: 394 		Post Options Post Options   Quote Linguinut Quote  Post ReplyReply Direct Link To This Post Topic: [DEFERRED] Authentication Information
    Posted: 05-Oct-2007 at 4:33pm
How do I access user authentication information from within a module?  Is it possible to access active directory data?
 


Edited by Linguinut - 13-Oct-2007 at 7:36am
Back to Top
Bill Jensen View Drop Down
IdeaBlade
IdeaBlade
Avatar

Joined: 31-Jul-2007
Location: United States
Posts: 229 		Post Options Post Options   Quote Bill Jensen Quote  Post ReplyReply Direct Link To This Post Posted: 08-Oct-2007 at 2:47pm
Authentication information is generally boolean:  either the user is who he says he is (based on his credentials) or not.
 
Once a user is authenticated, authorization determines what that user is allowed to see or do.  Often this is accomplished by assigning the user string-valued roles stored in the Principal object.  This is created on the server and passed back to the client where it may be queried via the IsInRole() method of the Principal object.
 
If more authorization information is needed, you could create a custom Principal object.
 
I really don't know much about Active Directory.
 
Bill J.
Back to Top
Linguinut View Drop Down
Senior Member
Senior Member
Avatar

Joined: 14-Jun-2007
Location: United States
Posts: 394 		Post Options Post Options   Quote Linguinut Quote  Post ReplyReply Direct Link To This Post Posted: 08-Oct-2007 at 4:37pm
Sorry...I meant user authorization.
 
If a user is not authorized to add a new entity (they can edit), how do I make that happen?
 
If a user is not authorized to view a portion of the data (only division A data, for example), how do I limit various view, lists, modules, etc.?
 
I figure, if there is a general way to do this (service, injection, etc.), I can extend it to work with my active directory.
 
Since this is security in a CAB application, I thought it best to leave this issue here.
 
Thanks!
Bill
Back to Top
Linguinut View Drop Down
Senior Member
Senior Member
Avatar

Joined: 14-Jun-2007
Location: United States
Posts: 394 		Post Options Post Options   Quote Linguinut Quote  Post ReplyReply Direct Link To This Post Posted: 13-Oct-2007 at 7:35am
This is related to the newer thread--Security Application Block.  I'll pick these questions up in that thread, if necessary.
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down