Building e-Commerce Sites with the .NET Framework

Role-Based Security

Internet applications such as MyGolfGear.NET sometimes need to provide access to certain functionality based on who the user is. Many applications handle this access from the role level rather than on a case-by-case basis. So, a user's role can be checked and resources can be shared based on the role of the user. The .NET CLR supports role-based security based on Windows accounts or custom identities.

Overview of Roles

Roles can be used to enforce policy or restrict functionality. For instance, MyGolfGear.NET could implement a role called SiteAdmin. Users who are members of this role would have the ability to add, remove, update, and delete categories, parts, users, and other application-related data.

The .NET CLR implements ...