Hello,
Relatively new to the .NET world and I am trying to write up specifications for implementing role based security in our database system.
1. Will this table structure suffice allow me to implement .NET authentication and authorization?
Simplifying, I would setup three tables in our database: User, Roles and UserRoles. I would use the User file for Authentication. On login I would test the entered login and password against that table.
The Roles table describe the various roles in our company - i.e. Admin, Payroll Clerk. etc. As expected the UserRoles is a link between the User and Roles tables. As a user tries to perform a restricted action I would have the developers authorize their use via the UserRoles table.
Am I off-base here?
2. What is the most efficient way in capturing the Roles information?
Once it is loaded once for a user I would not want ...
Go to the complete details ...