question of security
Messages   Related Types
This message was discovered on ASPFriends.com 'aspngibuyspy' list.


Peder
Can anyone help find out why the content og the authorized roles field in
the tabs database uses a string (admin;press) to register what roles are
authorized to view the different tabs. Wouldnt it be much better to use the
Roleid (creating a string like 7;5 instead of admin;press ). That way you
would be able to change the name of a role without having to change it for
every tab. Or is there a good reason?

Greetings from Denmark

Peder

Reply to this message...
 
    
Dave VanderWekke
Human readability. It is good for debugging login issues at a single
glance.

-----Original Message-----
From: Peder [mailto:Click here to reveal e-mail address]
Sent: Thursday, August 08, 2002 7:26 AM
To: aspngibuyspy
Subject: [aspngibuyspy] question of security

Can anyone help find out why the content og the authorized roles field
in the tabs database uses a string (admin;press) to register what roles
are authorized to view the different tabs. Wouldnt it be much better to
use the Roleid (creating a string like 7;5 instead of admin;press ).
That way you would be able to change the name of a role without having
to change it for every tab. Or is there a good reason?

Greetings from Denmark

Peder

| [aspngibuyspy] member Click here to reveal e-mail address = YOUR ID
| http://www.asplists.com/asplists/aspngibuyspy.asp = JOIN/QUIT
| http://www.asplists.com/search = SEARCH Archives

Reply to this message...
 
    
Ron Novendstern
Take me off your fucking list!
----- Original Message -----
From: "Dave VanderWekke" <Click here to reveal e-mail address>
To: "aspngibuyspy" <Click here to reveal e-mail address>
Sent: Thursday, August 08, 2002 8:25 AM
Subject: [aspngibuyspy] RE: question of security

[Original message clipped]

Reply to this message...
 
    
Jesse Murray
Above and beyond that, from a database perspective I've always wondered why
security isn't handled in a link table between roles and users.

Jesse

"Dave VanderWekke" <Click here to reveal e-mail address> wrote in message
news:695288@aspngibuyspy...
[Original message clipped]

Reply to this message...
 
    
David Foderick
It should be. I think Microsoft just did it for
expediency. IBS was just meant as a proof of concept
and I think they just didn't follow their own best
practices.

--- Jesse Murray <Click here to reveal e-mail address> wrote:
[Original message clipped]

__________________________________________________
Do You Yahoo!?
HotJobs - Search Thousands of New Jobs
http://www.hotjobs.com

Reply to this message...
 
 




Ad
MBR BootFX
Best-of-breed application framework for .NET projects, developed by Matthew Baxter-Reynolds and MBR IT
 
 Copyright © Matthew Baxter-Reynolds 2001-2008. '.NET 247 Software Development Services' is a trading style of MBR IT Solutions Ltd.
Contact Us - Terms of Use - Privacy Policy - www.dotnet247.com