Questions tagged [roles]
The roles tag has no usage guidance.
38 questions
-2
votes
1
answer
121
views
Software Development Team Roles [closed]
While it is an undeniable truth that there is no formula for the perfect team mainly because different projects might require different roles and skills, there should be some pretty common elements to ...
- 113
3
votes
5
answers
249
views
User stories about one and the same functionality for two different roles
My team is building a solution where a mobile app communicates with a backend. I need to describe functionality where the communication between the app and the backend is optimized according to some ...
- 41
0
votes
1
answer
3k
views
Complex roles, permissions and hierarchical group management in Laravel
I'm currently in the planning phase / feasability study of a rather big web application which is meant to be implemented using Laravel.
My own experience on the matter is rather limited but I'd like ...
- 81
0
votes
2
answers
697
views
Architecture for multi layered role system
I want to make three layers of application all served through Rest API.
For a user case we can say it's school management system where there could be multiple schools where the teachers are ...
- 103
0
votes
0
answers
81
views
Is tagging an acceptable way to circumstantially add or remove user permissions in a role-based system?
Background
Our users can have a single role per account (internally an IAM domain), but may have roles across multiple accounts.
Each role is defined as a list of permissible actions.
Problem
In ...
- 471
0
votes
1
answer
85
views
Designing a shared-role web apps
I have several Django services which all have their own login portal, and colleagues have a user/pass for each portal (if we've given them permission). We'd like to unite all of these portals and ...
- 115
-1
votes
2
answers
189
views
Should I prepopulate resources and permissions in my system?
I am following the rbac model in my system.
I want to know if I should prepopulate the resources and permissions table?
I have resources like contracts, contract_drafts, SLA (service level agreement)...
- 489
31
votes
2
answers
47k
views
How to design role based access control?
I am trying to follow the role bases access control model to restrict what users can or cannot do in my system.
So far I have the following entities:
users - People who will use the system. Here I ...
- 489
0
votes
2
answers
511
views
Should I use role-based authentication?
I have 3 types of users who might login to my website: Admin, Instructor, Student.
I already have tables for Students and Instructors , and each one has its unique properties .
Now I want to ...
1
vote
1
answer
9k
views
How to integrate Laravel passport, oauth scopes and roles and permissions
I am developing SPA in angular and backend API in laravel 5.3. I have integrated Laravel Passport for oauth.
I have to make roles and permissions implementation using views on tables from other ...
- 111
0
votes
3
answers
224
views
Who should develop the database relational model diagrams?
Developing a co-founded idea software product can have sometimes misunderstood information about roles and responsibilities. A Management role is responsible for understand and delegate the operator's ...
6
votes
2
answers
2k
views
Permission system using PHP and JS
I'm developing an admin dashboard with different areas, where different users may have different permissions. For example:
News
John: edit, view, add, remove;
Carlos: edit, view;
Mario: --;
Support
...
- 291
2
votes
3
answers
619
views
Database design for changing user roles
What database design would you suggest for the following example?
Example: Imagine a bus with some people inside. Every person has some attributes like name, etc. Also there are driver- and passenger-...
- 141
4
votes
2
answers
913
views
Proper way to differentiate user types in OO
I'm designing an application where I have users and admins (further down in the future, I can have different sub-ranks, where each one can have access to some area of the application).
Currently, I ...
- 317
3
votes
4
answers
439
views
Does my agile project really need a dedicated business analyst (BA)?
At the consultancy I'm from we were encouraged to be "full stack" team players in "self organizing teams". This wasn't just "full stack" in the technical sense (DevOps, automated testing, UX/UI ...
- 216
1
vote
1
answer
967
views
Adding support for privileges to an ASP.NET MVC application already supporting roles based authorization
I currently have a system where there is a user table, a role table, and a user-roles association table, where one user can be associated to multiple roles (like Admin, BasicUser, etc.). I am able to ...
- 137
8
votes
4
answers
5k
views
Correct Way to Implementing Authorization Checks in ASP MVC
In ASP MVC we have the Authorize attribute to perform check at either a controller level or at a controller method level. But what if you need to do check permissions inside a controller method e.g ...
- 291
6
votes
4
answers
14k
views
How to simplify this Role and Permission management design?
I'm working on a web application that has users with multiple roles and each user can perform multiple operations, based on user's role, and the permission level the role has on the operation. I came ...
- 643
1
vote
1
answer
374
views
User, user Role and user Info, data base design problem
I am creating an application that will manage job interviews and help the employers to choose the job seekers based on a ranking system that's based on some user info.
I've created a database that has ...
1
vote
1
answer
3k
views
Naming conventions for hierarchical roles in an application [closed]
I'm creating an application that internally will have have three totally different separated areas of interfaces.
- One where users create content and interact with each other
- One where one person ...
- 111
1
vote
1
answer
893
views
Databaseless ASP.NET MVC 5 on top of an external REST API
Where you would envision an out-of the-box ASP.NET MVC 5 web application on top of an MSSQL database, I have now been placed in a situation where I'm supposed to use custom external token endpoints ...
- 823
71
votes
3
answers
36k
views
Role vs Permission Based Access Control
I'm trying to understand the inherent tradeoff between roles and permissions when it comes to access control (authorization).
Let's start with a given: in our system, a Permission will be a fine-...
- 4,920
4
votes
2
answers
5k
views
Roles and permissions: a good approach in defining permissions?
My application has users and administrators. The administrators split into two: super-admin and limited-admin. The super gets all permissions while the limited can be configured to inherit just the ...
- 141
3
votes
2
answers
664
views
Calculate different prices for different user types
I'm working on a website that, among other things, sells courses. Each course is segmented in units, to which users can subscribe but is not a requirement that they subscribe to all of them. Now the ...
- 131
1
vote
1
answer
89
views
What's the proper name for the type of security where we secure resources by ownerrship?
I work on a REST API that mixes two types of security:
First you have standard role-based security - so we have multiple roles such as administrator, read-only user, super user user, etc.
Then we ...
- 173
6
votes
3
answers
6k
views
How to securely implement roles in a Windows Form application?
As an ISV, what is considered best practice for implementing application role based security? In other words, only allow users to access certain features in the application based on what roles they ...
- 113
0
votes
1
answer
121
views
Roles configuration strategy
We're close to start new project using sf2, and, probably, FosUserBundle.
Keeping that in mind - what's the best strategy to define roles? App will be used by multiple divisions inside our company (...
- 556
0
votes
1
answer
4k
views
Custom Role Provider in ASP.NET MVC and specifically a User having multiple Roles
I have searched around and I can't find any particular answer that addresses what I am asking but no doubt it will have been mentioned already somewhere.
I know that when you inherit from an abstract ...
- 165
28
votes
8
answers
9k
views
What are the negatives of Development Managers as Scrum Masters?
It is commonly agreed that team managers should not be scrum masters, but I am struggling to see why. For context, I am an Application Development Manager with 4 devs in a Scrum Team. I come from a ...
- 862
4
votes
2
answers
3k
views
Best practice in application design / SQL authentication
I am currently involved in the implementation/design of an existing application for a large scale customer. The application has a similar model as e.g. vCenter Server whereby a number of components ...
- 41
3
votes
2
answers
7k
views
Design pattern for data privileges
I'm designing a financial system that should grant access to data based on roles and privileges. For example, a manager can see the financial transaction of users under his domain but not information ...
- 133
10
votes
6
answers
5k
views
What defines "software developer" role
I am a junior software developer and I have been working for a company less than a year.
While I always thought being a software developer means to develop software and CODE something, my tasks are ...
- 275
6
votes
5
answers
1k
views
Is a coder that 'quality checks' bug fixes and bugs raised by testers a recognised role?
I've recently found myself frequently in the position where I'm checking both bug fixes by other programmers, and bugs raised by the QA team.
Any bug fixes frequently end up having 'collateral damage'...
- 161
2
votes
1
answer
228
views
Should I manage authentication on my own if the alternative is very low in usability and I am already managing roles?
As a small in-house dev department, we only have experience with developing applications for our intranet. We use the existing Active Directory for user account management. It contains the accounts of ...
- 221
4
votes
2
answers
1k
views
What kind of permission is this? (Groups+Roles)
I'm starting to need an access control for roles in my app.
I don't know much of this, but I understand how vBulletin works:
I create groups, then give permissions to groups.
I think that what I ...
- 697
0
votes
1
answer
2k
views
C# Role Provider for multiple applications
I'm making a custom RoleProvider that I would like to use across multiple applications in the same application pool. For the administration of roles (create new role, add users to role, etc..) I would ...
- 409
22
votes
5
answers
15k
views
In Scrum, why shouldn't the Product Owner and ScrumMaster roles be combined?
In the more traditional projects that I've worked on, the project manager (and, on larger projects, there might be associate/deputy/assistant project managers should one person be unavailable) is the ...
- 84.2k
28
votes
19
answers
5k
views
What hat should a programmer not wear? [closed]
In my experience, software developers tend to wear multiple hats and fill multiple roles with different responsibilities. From not only coding, but sometimes also writing SQL, designing the user-...
- 9,441