Databases
StackOverflow2013
Postsdbo
POUser Group and Role Management in .NET with Active Directory
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POUser Group and Role Management in .NET with Active Directory
    primarykey
    data
    text
    <p>I'm currently researching methods for storing user roles and permissions for .NET based projects. Some of these projects are web based, some are not. I'm currently struggling to find the best method to achieve what I'm looking for in a consistent, portable way across project types.</p> <p>Where I'm at, we're looking to leverage Active Directory as our single point of contact for basic user information. Because of this, we're looking to not have to maintain a custom database for each application's users since they are already stored in Active Directory and actively maintained there. Additionally, we don't want to write our own security model/code if possible and would like to use something pre-existing, like the security application blocks provided by Microsoft.</p> <p>Some projects require only basic privileges, such as read, write, or no access. Other projects require more complex permissions. Users of those applications might be granted access to some areas, but not others, and their permissions can change across each area. An administration section of the app would control and define this access, <strong>not</strong> the AD tools. </p> <p>Currently, we're using integrated Windows Authentication to perform authentication on our intranet. This works well for finding out basic user information, and I've seen that ASP.NET can be extended to provide an Active Directory roles provider, so I can find out any security groups a user belongs to. But, what seems like the downfall of this method to me is that everything is stored in Active Directory, which could lead to a mess to maintain if things grow too big. </p> <p>Along this same line, I've also heard of Active Directory Lightweight Directory Services, which seems like it could extend our schema and add only application specific attributes and groups. Problem is, I can't find anything on how this would be done or how this works. There are MSDN articles that describe how to talk to this instance and how to create a new instance, but nothing ever seems to answer my question.</p> <p><strong>My question is:</strong> Based on your experience, am I going down the right track? Is what I'm looking to do possible using just Active Directory, or do other tools have to be used?</p> <hr> <p><strong>Other methods I've looked into:</strong></p> <ul> <li>Using multiple web.config files [<a href="https://stackoverflow.com/questions/176338/customer-configurable-asp-net-web-site-security-for-fine-grained-control-of-page">stackoverflow</a>]</li> <li>Creating a custom security model and database to manage users across applications</li> </ul>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USCommunity
    1. USSteve Platz
    plurals
    1. PL
      singulars
      1. LTLinked
    1. PL
      singulars
      1. LTLinked
    2. PL
      singulars
      1. LTLinked
    3. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POUser Group and Role Management in .NET with Active Directory
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POUser Group and Role Management in .NET with Active Directory
      1. USEven Mien
      1. VTFavorite
    3. VO
      singulars
      1. POUser Group and Role Management in .NET with Active Directory
      1. This table or related slice is empty.
      1. VTUpMod
    1. COI've added sample code, as requested
      singulars
      1. POUser Group and Role Management in .NET with Active Directory
      1. USTimothy Walters
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload