.NET Security and Cryptography

Chapter Seven. .NET User-Based Security

In its simplest form, the purpose of security is to prevent people and programs from doing things that an administrator or a programmer is not willing to allow. In this chapter we look at the first of two major aspects of .NET security programming, known as user-based security.^[1] In the past, security has always focused on managing user permissions that allow you to restrict actions based on the identity of the current user. Thus, traditionally, you have been able to control how specific users can access certain resources, such as files, registry entries, and so forth. If you have already worked with security-related programming in Windows or UNIX, you are probably familiar with this traditional concept ...