Building Secure Microsoft® ASP.NET Applications

Appendix . How To: Use Role-based Security with Enterprise Services

This How To describes how to create a simple serviced component that uses Enterprise Services (ES) roles for authorization.

Notes

• ES roles are not the same as .NET roles.

• ES roles can contain Windows group or Windows user accounts.

• ES roles are maintained in the COM+ catalog.

• ES roles can be applied at the (ES) application, interface, class or method levels.

• ES roles can be partially configured declaratively by using .NET attributes in the serviced component’s assembly.

• Windows group and user accounts must be added by an administrator at deployment time.

• Administrators can use the Component Services administration tool, or script.

• To effectively use Enterprise Services role-based security ...