All Questions
Tagged with authorization roles
7 questions
71
votes
3
answers
36k
views
Role vs Permission Based Access Control
I'm trying to understand the inherent tradeoff between roles and permissions when it comes to access control (authorization).
Let's start with a given: in our system, a Permission will be a fine-...
- 4,920
31
votes
2
answers
47k
views
How to design role based access control?
I am trying to follow the role bases access control model to restrict what users can or cannot do in my system.
So far I have the following entities:
users - People who will use the system. Here I ...
- 489
8
votes
4
answers
5k
views
Correct Way to Implementing Authorization Checks in ASP MVC
In ASP MVC we have the Authorize attribute to perform check at either a controller level or at a controller method level. But what if you need to do check permissions inside a controller method e.g ...
- 291
4
votes
2
answers
913
views
Proper way to differentiate user types in OO
I'm designing an application where I have users and admins (further down in the future, I can have different sub-ranks, where each one can have access to some area of the application).
Currently, I ...
- 317
1
vote
1
answer
967
views
Adding support for privileges to an ASP.NET MVC application already supporting roles based authorization
I currently have a system where there is a user table, a role table, and a user-roles association table, where one user can be associated to multiple roles (like Admin, BasicUser, etc.). I am able to ...
- 137
0
votes
1
answer
4k
views
Custom Role Provider in ASP.NET MVC and specifically a User having multiple Roles
I have searched around and I can't find any particular answer that addresses what I am asking but no doubt it will have been mentioned already somewhere.
I know that when you inherit from an abstract ...
- 165
-1
votes
2
answers
189
views
Should I prepopulate resources and permissions in my system?
I am following the rbac model in my system.
I want to know if I should prepopulate the resources and permissions table?
I have resources like contracts, contract_drafts, SLA (service level agreement)...
- 489