Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 Other Forums
 Other Topics
 Application Security Considerations

Author  Topic 

Nazim
A custom title

1408 Posts

Posted - 2002-03-02 : 09:55:01
Am in the process of developing a application. Its kinda unique to me. This application's security considerations are quire different from what i have done till now.

I will try to explain it.

I plan to develop this in Asp.Net (with C#) and Sql Server as backend.
the requirements are depending on the rights granted to the user. ONLY that corresponding tab should be displayed.

For example. the application should be like hotmail account. if i log in with a general user account the inbox,compose....and other tabs should be displayed supposing the user doesnt have the access to Compose then Compose Tab should be suppresed.


Hope i make myself clear.

Any Ideas?



--------------------------------------------------------------

nr
SQLTeam MVY

12543 Posts

Posted - 2002-03-02 : 10:06:54
I have done things like this in the past where every control is defined as hidden. Each control has a refence in the database and there is a linking table between the users table and the control table to say which users have access to the table. When each page is displayed the database is queried and the relevant control is revealed.

You can also use a single page and have the page structure in the database and controls are only created if necessary but that's a bit more complicated.

I assume this sort of thing will still work in .net.
Up to you how much you pre-load and how much database activity you have per page.
An XML file might work well for this.

==========================================
Cursors are useful if you don't know sql.
Beer is not cold and it isn't fizzy.
Go to Top of Page

Nazim
A custom title

1408 Posts

Posted - 2002-03-02 : 23:22:39
nr , Can you elaborate on this?
quote:

An XML file might work well for this.




--------------------------------------------------------------
Go to Top of Page

Nazim
A custom title

1408 Posts

Posted - 2002-03-11 : 01:46:29
i could do it taking help from ibuyspy.com portal.

Its a great site to learn how Asp.Net can be applied .



--------------------------------------------------------------
Go to Top of Page
   

- Advertisement -