Hi All,
I am new to asp.net and programming. We are developing intranet based application - order processing system. We have different type of roles - Sales Person, Customer Service, Admin, Operator(Production, shipping etc.), Power user.
In our system, sales person can only view their customer account related data, they are not allowed to view other sales person's customer data. Customer service, admin, power user can access all customers. Operator can see only their job related data.
I am builtin asp.net security module. I can restrict all roles to page level(folder level) access. Means Admin can access all pages, sales person can access only pages inside the sales folder and so on.
But now I am confused how to restrict users to field level (ie- customerid).
It is very common problem but I don't have any idea how to do it. Please give me a suggestion.
...
Go to the complete details ...