Most applications serve a variety of constituents – customers, customer service, marketing, sales, and management, to name a few.  It’s increasingly common in contemporary web applications to permit much broader access to applications and their underlying data than was common with client server applications, which had more restricted user bases.  With broader use comes an increased need to partition data according to the user type – and sometimes down to the individual user as well.

One of the most convenient security mechanisms is role-based security because it allows individual users to be assigned into roles, and then access granted at the role level.  This makes for convenient administration because most applications need just a handful of roles – 5 or 10 at most – but may have thousands of users.

Broadly speaking, Iron Speed Designer generates three types of role-based security:

1. Simple sign-in authentication.  Application users must sign into the application.  Only users with user names and passwords can sign in, giving you control over who can access your application.

2. Single-role authentication.  Application users must have a designated role in order to access a particular web page.  Individual web pages are configured so that only those users with the designated role can access the page.

3. Multiple-role authentication.  Individual web pages are configured to accept users who have one of several designated roles.

With role-based security, you can:

• Define user names and passwords.

• Create and assign multiple user roles for your users.

• Configure each web page for access by designated user roles.

• Generate your application’s entire role-based security infrastructure.

See Also

Role-Based Security Overview

Step 1:  Select Application Security Type

Step 2:  Enter Active Directory Connection String

Step 3:  Select the User Table (Database Security)

Step 4:  Select the Roles Table (Database Security)

Step 4:  Select the Policy Store Role Provider (AzMan Security)

Step 5:  Assign Page Permissions

Step 6:  Configure Individual Components for Role-Based Security

Component-Level Security

Administering Database Security at Run-Time

Displaying Data for Logged In Users

Active Directory and Microsoft Authorization Manager Configuration