I would like to add a feature where we can specify user access permission to specific features in the site or to specific types of data. The Web application is established and uses the .NET 2.0 membership provider. It uses reporting services, SqlDataSource controls to populate visible controls, and SQL Server 2005.
Scenario: picture an ecommerce site with categories for books and electronics. Some people have access to everything. Another class (role) of people only has access to the book category. They cannot see electronics in the menu, cannot get to those pages, cannot add electronics in maintenance pages, and all reporting services reports they look at screen out electronics completely. Another level of security would be to specify read/write type access for every type of data.
I can't think of any way to do this which isn't horribly complex. What I'm looking for is if anyone can point me to a book, whitepaper, example project, blog, etc., that dis ...
Go to the complete details ...