All,
I want to implement a security model within our ASP.NET Website (Intranet) to provide a mechanism of granting access to different pages. The site is a report based web application where users can access a range of reports. However, it is required that users are only granted access to certain reports based on a group they are in. The user logins and groups are stored in a 3rd party Sql Server database.
I have created a number of database tables that contain a list of asp.net web report pages that have the user groups and permissions assigned against each. My idea was to perform a lookup of these permissions before a page is served using HttpHandler. I have not been able to implement a working solution as yet.
I was anticipating the following:
1. User requests a web page from their browser (IE7)
2. ASP.NET uses HttpHandler to determine which page is being requested and performs a lookup for the logged ...
Go to the complete details ...