Hi there,
I am developing an intranet asp .net application, and plan to use windows authentication. I require users to be able to perform crud operations on their details only, and the administrators to have access to every user's details. My idea is to store the windows username in the main Users table, so that each UserID is uniqly associated with a windows username (and domain), which will prevent basic users from accessing data the should not access.
My question is - how secure this solution is? Is there any better way to go?
Thanks in advance,
noimed
...
Go to the complete details ...