Hi, I have a choice in an app I would appreciate wisdom regarding. Most samples and doco seems to refer to apps where there are authorisation Roles across all data by table or ASP folder or page - I'm having trouble finding guidance where authorisation is required down to the row level in a table.
Let's say there are 500+ (potentially more) Accounts. For each account there are 3 levels of security/auth (low, medium, high). (There are also admins across with full access). For reasons unique to this app, I must secure data at the Account row level (and any related child data).
In my app, I can either
(1) create an ASP.NET security Role for each (Account, SecurityLevel) pair, meaning there will be 1500+ ASP.NET Roles- and manage the roles using the framework tools
(2) use a special field/table which lists for each Account, the users and their security level, and use my own pages to allocate users to a particular Account
...
Go to the complete details ...