Hi all,
I am rewriting an ASP site in .NET and I want to use the full authentication/security model in .NET. I have created a simple demo application using Roles but I can't conceptually wrap my head around how to implement it in our project. I'll give you a simple analogy that fits our model.
Imagine we have the following roles Teaching Assistant and Student. There is a "Courses" SQL table. Now, a Teaching Assistant will be a TA of some courses but will most likely be a Student in other courses. As a TA they will have administrative rights such as marking, uploading, etc. As a student they can only view and download. In the ASP.NET roles/authentication system, once the user is a Teaching Assistant, I do not know how they would be a TA of some courses but not others.
Is the roles methodology the wrong thing to be working on? I guess the question boils down to how can I control admin "roles" on a per-something basis (li ...
Go to the complete details ...