Role Management By Rajat SinghRajat辛格色管理.pptVIP

CS 795 Rajat Singh Presentation Role Management in .Net By: Rajat Singh CS 795 Class Presentation Authentication and Authorization Authentication: User proves his/her identity Provides Set of Credentials Windows/Forms/Passport authentication Authorization: What actions and resources a user has authority to access Checks credentials to authorize access Role Management A role is a logical categorization that grants members of the role specific permissions. Helps to make security decisions based on the user running the code An abstract concept that can be used to represent any kind of grouping to assign a set of permissions Role Management, User Identity, and Membership Identify users to determine whether the user is in a specific role or not Establish user identity in two ways: Windows authentication: Identify users using their Windows domain account name. Forms authentication: Use role management to define roles and assign membership user IDs to those roles. Enabling Role Manager By Default Role Manager is disabled Enable it via Web.Config Role manager feature includes a roles management API that allows Role Management API Creating roles and deleting roles Assigning roles to users Deleting users from assigned roles Determines programmatically whether a user is in a role Getting information about which users are in which roles. Key Roles Methods CreateRole(): To create a new Role Key Roles Methods contd. DeleteRole(): Deletes an existing role Key Roles Methods contd. AddUserToRole(): Adds user to a role Key Roles Methods contd. GetRolesForUser(): Gets a collection of roles to which a user belongs. Key Roles Methods contd. GetUsersInRole(): Gets a collection of users belonging to a specific role Key Roles Methods contd. RemoveUserFromRole(): Removes a user from a specific role Web Administration Tool In ASP.NET 2.0Web Administration Tool can be used to create the users and then assign roles to them. Demo!!! References: P