Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [roles]

The tag has no usage guidance.

0
votes
0answers
32 views

ASP.NET RoleProvider AddUsersToRoles - Removing exception if user already has role

I'm implementing a custom RoleProvider in my ASP.NET web app, however I had a question about the example implementations of AddUsersToRoles and it's Remove counterpart shown here: https://msdn....
0
votes
0answers
64 views

How to architect permissions in mutliple roles per entity?

The goal is to create a fairly typical CRUD-based permission and role scheme for a multi-user, client-server desktop application. Goal A Permission marks some functionality of the application with ...
-4
votes
1answer
701 views

Is there a difference between Product Owner and Functional Owner role?

In Scrum, the role "Product Owner" is defined. In a nutshell, he is responsible to that the team delivers the right product. Sometimes I also read the role "Functional Owner". Unfortunately I haven't ...
0
votes
1answer
73 views

Designing a shared-role web apps

I have several Django services which all have their own login portal, and colleagues have a user/pass for each portal (if we've given them permission). We'd like to unite all of these portals and ...
-1
votes
2answers
96 views

Should I prepopulate resources and permissions in my system?

I am following the rbac model in my system. I want to know if I should prepopulate the resources and permissions table? I have resources like contracts, contract_drafts, SLA (service level agreement)...
8
votes
2answers
10k views

How to design role based access control?

I am trying to follow the role bases access control model to restrict what users can or cannot do in my system. So far I have the following entities: users - People who will use the system. Here I ...
0
votes
2answers
310 views

Should I use role-based authentication?

I have 3 types of users who might login to my website: Admin, Instructor, Student. I already have tables for Students and Instructors , and each one has its unique properties . Now I want to ...
1
vote
1answer
3k views

How to integrate Laravel passport, oauth scopes and roles and permissions

I am developing SPA in angular and backend API in laravel 5.3. I have integrated Laravel Passport for oauth. I have to make roles and permissions implementation using views on tables from other ...
0
votes
3answers
173 views

Who should develop the database relational model diagrams?

Developing a co-founded idea software product can have sometimes misunderstood information about roles and responsibilities. A Management role is responsible for understand and delegate the operator's ...
7
votes
2answers
659 views

Permission system using PHP and JS

I'm developing an admin dashboard with different areas, where different users may have different permissions. For example: News John: edit, view, add, remove; Carlos: edit, view; Mario: --; Support ...
2
votes
3answers
309 views

Database design for changing user roles

What database design would you suggest for the following example? Example: Imagine a bus with some people inside. Every person has some attributes like name, etc. Also there are driver- and passenger-...
3
votes
2answers
226 views

Proper way to differentiate user types in OO

I'm designing an application where I have users and admins (further down in the future, I can have different sub-ranks, where each one can have access to some area of the application). Currently, I ...
3
votes
4answers
210 views

Does my agile project really need a dedicated business analyst (BA)?

At the consultancy I'm from we were encouraged to be "full stack" team players in "self organizing teams". This wasn't just "full stack" in the technical sense (DevOps, automated testing, UX/UI ...
1
vote
1answer
711 views

Adding support for privileges to an ASP.NET MVC application already supporting roles based authorization

I currently have a system where there is a user table, a role table, and a user-roles association table, where one user can be associated to multiple roles (like Admin, BasicUser, etc.). I am able to ...
8
votes
4answers
2k views

Correct Way to Implementing Authorization Checks in ASP MVC

In ASP MVC we have the Authorize attribute to perform check at either a controller level or at a controller method level. But what if you need to do check permissions inside a controller method e.g ...
2
votes
4answers
4k views

How to simplify this Role and Permission management design?

I'm working on a web application that has users with multiple roles and each user can perform multiple operations, based on user's role, and the permission level the role has on the operation. I came ...
0
votes
1answer
186 views

User, user Role and user Info, data base design problem

I am creating an application that will manage job interviews and help the employers to choose the job seekers based on a ranking system that's based on some user info. I've created a database that has ...
1
vote
1answer
742 views

Naming conventions for hierarchical roles in an application [closed]

I'm creating an application that internally will have have three totally different separated areas of interfaces. - One where users create content and interact with each other - One where one person ...
1
vote
1answer
657 views

Databaseless ASP.NET MVC 5 on top of an external REST API

Where you would envision an out-of the-box ASP.NET MVC 5 web application on top of an MSSQL database, I have now been placed in a situation where I'm supposed to use custom external token endpoints ...
34
votes
2answers
17k views

Role vs Permission Based Access Control

I'm trying to understand the inherent tradeoff between roles and permissions when it comes to access control (authorization). Let's start with a given: in our system, a Permission will be a fine-...
3
votes
2answers
4k views

Roles and permissions: a good approach in defining permissions?

My application has users and administrators. The administrators split into two: super-admin and limited-admin. The super gets all permissions while the limited can be configured to inherit just the ...
3
votes
2answers
469 views

Calculate different prices for different user types

I'm working on a website that, among other things, sells courses. Each course is segmented in units, to which users can subscribe but is not a requirement that they subscribe to all of them. Now the ...
1
vote
1answer
82 views

What's the proper name for the type of security where we secure resources by ownerrship?

I work on a REST API that mixes two types of security: First you have standard role-based security - so we have multiple roles such as administrator, read-only user, super user user, etc. Then we ...
6
votes
3answers
3k views

How to securely implement roles in a Windows Form application?

As an ISV, what is considered best practice for implementing application role based security? In other words, only allow users to access certain features in the application based on what roles they ...
0
votes
1answer
99 views

Roles configuration strategy

We're close to start new project using sf2, and, probably, FosUserBundle. Keeping that in mind - what's the best strategy to define roles? App will be used by multiple divisions inside our company (...
0
votes
1answer
3k views

Custom Role Provider in ASP.NET MVC and specifically a User having multiple Roles

I have searched around and I can't find any particular answer that addresses what I am asking but no doubt it will have been mentioned already somewhere. I know that when you inherit from an abstract ...
26
votes
8answers
6k views

What are the negatives of Development Managers as Scrum Masters?

It is commonly agreed that team managers should not be scrum masters, but I am struggling to see why. For context, I am an Application Development Manager with 4 devs in a Scrum Team. I come from a ...
4
votes
2answers
2k views

Best practice in application design / SQL authentication

I am currently involved in the implementation/design of an existing application for a large scale customer. The application has a similar model as e.g. vCenter Server whereby a number of components ...
2
votes
2answers
5k views

Design pattern for data privileges

I'm designing a financial system that should grant access to data based on roles and privileges. For example, a manager can see the financial transaction of users under his domain but not information ...
10
votes
6answers
5k views

What defines “software developer” role

I am a junior software developer and I have been working for a company less than a year. While I always thought being a software developer means to develop software and CODE something, my tasks are ...
6
votes
5answers
803 views

Is a coder that 'quality checks' bug fixes and bugs raised by testers a recognised role?

I've recently found myself frequently in the position where I'm checking both bug fixes by other programmers, and bugs raised by the QA team. Any bug fixes frequently end up having 'collateral damage'...
2
votes
1answer
215 views

Should I manage authentication on my own if the alternative is very low in usability and I am already managing roles?

As a small in-house dev department, we only have experience with developing applications for our intranet. We use the existing Active Directory for user account management. It contains the accounts of ...
4
votes
2answers
903 views

What kind of permission is this? (Groups+Roles)

I'm starting to need an access control for roles in my app. I don't know much of this, but I understand how vBulletin works: I create groups, then give permissions to groups. I think that what I ...
0
votes
1answer
1k views

C# Role Provider for multiple applications

I'm making a custom RoleProvider that I would like to use across multiple applications in the same application pool. For the administration of roles (create new role, add users to role, etc..) I would ...
19
votes
5answers
15k views

In Scrum, why shouldn't the Product Owner and ScrumMaster roles be combined?

In the more traditional projects that I've worked on, the project manager (and, on larger projects, there might be associate/deputy/assistant project managers should one person be unavailable) is the ...
29
votes
19answers
4k views

What hat should a programmer not wear? [closed]

In my experience, software developers tend to wear multiple hats and fill multiple roles with different responsibilities. From not only coding, but sometimes also writing SQL, designing the user-...