Hi,
Currently we are developing a new business application in .net 4 with Entity Framework as ORM. For this application we would like to dynamically add permissions to user roles. So we have a Roles table and a Permissions table in our database (and a RolePermissions). In the Permissions table we can define the object (e.g. SalesOrder), optionally the property (e.g. OrderNumber) and the permission (e.g. Write). I don't know if this is the "right way" to do it, but it works fine on an object level (e.g. SalesOrder). But not on an instance of an object (e.g. SalesOrder with Status "Invoiced").
Is there a best practice out there for dynamic permissions on object level, as well as on an instance of an object level?
Many thanx!
...
Go to the complete details ...