c# - Building security architecture in web software (creating an API) -
i have set of actions in database, such add user, edit user, import users, send invitation, etc. have attached these permissions roles. attached these roles users.
is there pattern or api can create using this? not want put bunch of if/else statements in code check permissions. maybe interfaces good? sorry being vague, not know start , looking advise on how start (perhaps authorization rule provider?). in advance help.
microsoft's roles , membership basic , felt deals authentication no authorization.
but found looking for... rhino security!
http://www.ryantomlinson.com/post/an-enterprise-authorization-framework-part-1-introduction.aspx
Comments
Post a Comment